*.miraclesoft.com

- MIRACLE SOFTWARE SYSTEMS, INC -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:18:4b:f8:ae:41:a5:ad:8d:9b:30:b0:ee:2f:cd:b5 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

MIRACLE SOFTWARE SYSTEMS, INC

Organization: MIRACLE SOFTWARE SYSTEMS, INC
State / Province: Michigan
Locality: Novi
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:18:4b:f8:ae:41:a5:ad:8d:9b:30:b0:ee:2f:cd:b5
Serial Number (int): 13418435965688326284109515772337835445
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:d1:4c:95:2f:67:32:73:1a:ec:42:d6:f9:6c:d1:bf:8c:fa:c4:e0
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 26:43:28:cd:23:7b:50:49:b5:f4:25:40:48:d6:1f:dd:c0:7e:79:66
Fingerprint (sha256): 00:0e:03:aa:26:7f:c5:a9:d8:6e:ac:2c:b5:11:76:75:88:e6:7f:24:39:3b:a5:95:a4:ac:28:e8:e0:d1:bc:62

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.miraclesoft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.miraclesoft.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.miraclesoft.com

Other certificates including the domain name miraclesoft.com

(limited to 100 certificates)
*.miraclesoft.com
univ.qiyoapps.com
sw.app.ignates.com
garciamonterde.es
nm-develop.de
www.sidekick.management
ekadtepi.com
bitstec.bitsbo.com
bootware.jp
status.miraclesoft.com
mail.miraclesoft.com
dailybreadapp.com
www.toxapedia.com
sfet.in
mars.miraclesoft.com
meerkat.dev.zoocommerce.tech
www.squeeeezed.com
doc-convert.miraclesoft.com
jooish.app
help.miraclesoft.com
register.fishfacts.com
albertodenatale.com
everyday-works.com
*.miraclesoft.com
www.miraclesoft.com
www.sonacollection.in
portal.sociusco.com
cms.zsottu.hu
lebom.dev.cacango.com
saiasqueamo.com.br
*.miraclesoft.com
id.auth.au.psithur.app
www.commsbylevels.com
kiosk.michaelewen.com
crypto.gomri.fr
www.tegnespillet.no
app.uottahack.ca
boards.amitco.info
*.miraclesoft.com
dhruvdhawan.com
*.miraclesoft.com
ndaby.club
dancosolutions.net
www.qream.app
*.miraclesoft.com
www.dharmeshdhabliya.com
*.miraclesoft.com
recruiter.miraclesoft.com
api.dragonereum.io
sashagoldberg.com
*.miraclesoft.com
boemyo.com
www.miraclesoft.com
gustavo-mattey.chevere.tech
siso.miraclesoft.com
dizkount.com
my.dev.norby.live
anvatara.africa
codigo.turnosweb.app
learn.nixonsucuc.com
mail.miraclesoft.com
www.appreasy.io
danielleteixeira.com.br
me.miraclesoft.com
dyn.bantoa.com
tryrival.com
www.evbenchmark.com
covid19.miraclesoft.com
redencaorock.com.br
www.timeloggerapp.com
*.miraclesoft.com
assessmentreferral.com
api.platypussecurity.com
fa.ayukawayen.net
spacesapp.zang.io
mediocremelodies.com
mail.miraclesoft.com
deadlift.app
login.everyfax.com
www.pleasedto.com
helpdesk.miraclesoft.com
mail.miraclesoft.com
*.miraclesoft.com
macaulaybusinessclub.com
fhub.frantic.com
www.know-it-all.io
me.miraclesoft.com
www.spaziolaboratorio.com.br
fireflyratings.com
map.miraclesoft.com
peachy.audio
*.miraclesoft.com
*.miraclesoft.com
tom.miraclesoft.com
link.homing.com
comunidadcep.com.ar
mars.miraclesoft.com
www.cammsroadvet.com.au
api.dragonereum.io
canal2.clapo.ga

Certificate

The complete raw certificate details for *.miraclesoft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6QnXKWdpvGwsXXZzNg+
Ab5ZqAks0ODXJ84Tv1CkiMawJwGBdY0IPOe+P4NtY+D1ylM4ufWFy/UTNVQRettS
KmEzocYMYixNOFAGOblMQ34RtOX8huyhQbjyUG0f/qWlgGlJKScUP83y03dR0Bqr
JczXghzQ4ZcYeem6toEVrdecS1cnG1TyEHrKJjB1wSDce+GER/CA5EjEBVjFXhR0
yz0A2CNglZ/Q0UoZs/YZLJd7QRRWYN1magSvxTef6Be7/qibcft9p9IahJpCkqbK
tLSKKyq/5ItPaDgUs71vSsxXiOhTNUPCJsYmuIyysyYiU3M+JD0+sYspE79ETBGl
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13418435965688326284109515772337835445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIRACLE SOFTWARE SYSTEMS, INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.miraclesoft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22677603823658013431506009657890824023015955042113102564658243037334932029114228533910443046903300664603034519572688696153434932350831357526883375689904697894634498278764814626873891125795131377142310536229175908531534117618023725282753425005618044059018468726497791684546364706777873893350661394198773209857744863310138320003669345852546431181667765923382241327602611821014830789842225451065280075453578844012388717025922699974307932788792631428208626676429815866913055606981907276249069643383748609277362471336015812461912296695647427405265568418708749114178080549510826170206604516568988517040079167621979324917093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bd14c952f6732731aec42d6f96cd1bf8cfac4e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miraclesoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052aa91e582a3bc6cf74cf936324bf890af1c266179b9be1e3187f2dd46bb88175fdf6e0874ce9aa04b8be989e2fe3c2a1f601ad5d43132a4cfbf286eb8b3349a8d80424804dd0b5756f1cb76131f829219b3dd26f5225b43c2dd1c8937950f115d200ca9e10b4db117dea9c0a59b6f8892ab7e5ea9109ded7350aa61bf8bb902cf60d858e3451e4c9b96d622b768d57188aeb5ea03d9af38946faadbfe923c23c8e09180a651d30722ca57c1cd7c2f6d4b37bd299db8ca3677835084a103a92f955af9ef345b9e89aacf887fe12e73c82563b70909a0ea121529004d29c329d567d93d7423dd14ab712f38fb71c2b949e7d341136f7aa90db1856738a82e8ee6