licensing.truno.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 3b:c5:a6:c5:c3:59:e1:4c:40:8e:70:c7:d6:5e:4d:1b was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=licensing.truno.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3b:c5:a6:c5:c3:59:e1:4c:40:8e:70:c7:d6:5e:4d:1b
Serial Number (int): 79450716780841854283680970643966151963
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): a3:26:13:81:9b:fd:cd:22:28:95:6e:11:64:37:0c:f2:5f:da:fd:6b
Fingerprint (sha256): 00:38:f7:2a:36:e2:72:9a:69:d3:ac:2f:27:f7:60:b3:fa:e1:8c:52:ee:fd:b9:f3:b4:0f:73:c5:f0:bf:b3:5b

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate licensing.truno.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for licensing.truno.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

licensing.truno.com
www.licensing.truno.com

Other certificates including the domain name truno.com

(limited to 100 certificates)
helpdesk.ejplastics.com
licensing.truno.com
ssc-sd.oshco.com
blog.truno.com
www.truno.com
servicedesk.primeenergy.ph
www.truno.com
blog.truno.com
ithelp.newhopechurch.tv
www.truno.com
orange.truno.com
orange.truno.com
blog.truno.com
*.truno.com
blog.truno.com
www.truno.com
servicedesk.towermsa.com
www.truno.com
hd.gsp.bl.it
helpdesk.americanassets.com
helpdesk.worldvision.org.uk
helpdesk.maruservices.com
www.truno.com
www.truno.com
hd.gsp.bl.it
desk.kavasa.in
info.truno.com
www.truno.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
helpdesk.charlesignatius.co.in
timeforgekb.truno.com
helpdesk.endemolshine.com.au
email.truno.com
remoteservices.truno.com
hd.gsp.bl.it
*.truno.com
ssc-sd.oshco.com
ssc-sd.oshco.com
www.truno.com
servicedesk.gourmetegypt.com
mail.truno.com
email.truno.com
hd.gsp.bl.it
hd.thehackettgroup.com
servicedesk.towermsa.com
opsvpn.truno.com
*.apps.truno.com
hd.gsp.bl.it
swkey1.truno.com
servicedesk.ibsagroup.com
blog.truno.com
helpdesk.endemolshine.com.au
hd.gsp.bl.it
helpdesk.maruservices.com
hd.gsp.bl.it
www.truno.com
www.truno.com
hd.gsp.bl.it
www.truno.com
info.truno.com
helpdesk.charlesignatius.co.in
hd.gsp.bl.it
www.truno.com
remoteservices.truno.com
www.truno.com
www.truno.com
helpdesk.americanassets.com
helpdesk.riversidecc.org
info.truno.com
mesadeayuda.pffsa.com
ssc-sd.oshco.com
support.cortacgroup.com
mail2.crstx.com
hd.gsp.bl.it
email.truno.com
www.truno.com
atendimento.escrimig.com.br
orange.truno.com
info.truno.com
email.truno.com
atendimento.escrimig.com.br
helpdesk.worldvision.org.uk
atendimento.escrimig.com.br
esupport.infimedia.co.id
helpdesk.ejplastics.com
remoteservices.truno.com
sos.olanet.mx
sos.olanet.mx
atendimento.escrimig.com.br
desk.kavasa.in
servicedesk.zip.co
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
esupport.infimedia.co.id
remoteservices.truno.com
hd.gsp.bl.it

Certificate

The complete raw certificate details for licensing.truno.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79450716780841854283680970643966151963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 12:10:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-09 12:10:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'licensing.truno.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905356936843062638997732480325258798332694442220206330967360184771291665692837532115063520777531510604639413815747699122761759518074855797755418589720723820370515355349549721155321335848917863036432040421676064318405588424982521773684923337043827054041894932210161331276011397764300308216369996451279421843240758021978690476026896733741753877459180829265590449362539862640022035959338490485516146798591496566808892638216530729172395743409611381470639416518553465815676398162226660742165819777267704140885993154119689083233787987721741845285339780141495005347442133073056182699602451331762351629968662279391367652660231002050214239278461949131449164439419633401310673702740229242957754447051071121290697115536738002309137411120131289491864331592298103948060866451785456081558350161012572160218581609652101973737853208300148244464520616102604147326934965893211788509827405383545098241370009703822812635581870819745750354614732523671202743504620566067171274416133891918187943557701589445865964523359468044759642244348104218020799877136964211512797516821450084858033554417837000184460864778878283821782173936372054667422864587922202097214735367742338225417689680224897238542950622848184893266781052504791477838123466742441011091521544409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing.truno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licensing.truno.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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