www.cwgc.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:bc:07:ac:f4:a9:0b:ba:45:d1:e6:03:eb:4d:90:21 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cwgc.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:bc:07:ac:f4:a9:0b:ba:45:d1:e6:03:eb:4d:90:21
Serial Number (int): 14268587447083590580440671171717730337
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:0e:7e:26:df:5c:a6:7c:10:8c:3a:12:08:91:ed:82:a4:1c:4d:ae
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): de:5a:10:fa:84:e2:52:b2:0c:74:59:e4:60:67:9a:af:88:81:98:a5
Fingerprint (sha256): 02:95:a1:13:ed:40:18:8d:29:95:05:4d:4e:ec:cf:bd:7d:bd:b2:9b:5e:04:90:a0:0e:8b:87:da:08:8d:a5:b3

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.cwgc.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwgc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cwgc.org

Other certificates including the domain name cwgc.org

(limited to 100 certificates)
shapingoursorrow.cwgc.org
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com

Certificate

The complete raw certificate details for www.cwgc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysWC2Oxg1S8h8kDO7pMo
YhHwDGQzOPS8fXBCuniQxHr2j/r5d8XPirPdrwHrrNfU+pP+wq/sckqwTl/FjnRK
XQCfupGNSHZcBwk6lj8WI+pjM+AMl2q+MRnbez7JEEYVBdu+qB5mxubk3syol0ik
RvJWw8wSe/cNT50SHYeqdcTVKj8LBmj3fNwR3pUDptctncFL7pZSui7HUuFl7deN
yJDmDOju2e2hP231j8KP5H/I9ZPGUJlRlsUpsgOhj63ItB48PiAEQRO+TpKZBzIb
mTsBS2EqI7UpCt2sw826X27dAFffZPtUVkClq//ANAclPYofAGB8q+t6PWL7SsaY
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14268587447083590580440671171717730337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwgc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25597533967654733176441810464380438528897360952459270893036269817891254571721768104335214493041248152315967838341136488805384239500443301673046030571719695472591341902293431687632521051195961790853418722785741196825965018950884641708690572060993748485310825953054521801489230406576207653779675186893443153112310087070663740934732482548088427624387884182517937875427932066685643039036755595462362643513001143275450895240507846871873893017032153368187171012889330048815023124024191678930206227106577607528249156334012874137280067275632846059206443093409721497576949428214932669007596989420659381073655338395322265540753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e20e7e26df5ca67c108c3a120891ed82a41c4dae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dac93a8e20000040300473045022077b4fcc1190023b7f3de18eff34ad0c42d470c9057fef4b9d3e9e0605e611983022100b192b00e903cd7b2f95238326a8563ab6b6ce68ff2ff84b3163ab9e7480a89bb00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dac93a917000004030047304502203410bf618fb8041eb8b8d8a502720aa86a21cf17f24632d256301b18b6462256022100a8071a6aae762ac4d016ad57c0bcf27da2881a084a3b096e5fec7fada68d2868007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dac93a9160000040300463044022015619b39963d47dc04e29425566c39d65564984fbe426d7309b842f2bce22688022063b02de1fab44e0a5c68e37bb9b0f84c6b9f1b61ce9ade7b08c3776d0289a876
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0085f217616ea368aee9bc6e7bfa3264649d2245a759933e5a2fccbc33eee9e7291ba97f3d3ae7f7166f0710ae2387a806ad5e68fa99d7648258d23f57322c7e672584e7c3e799219c19d7d76137b65bbfee3054f2724eda958c866c9e8e8c942b8ab0490a542181ae559d83e3efc53ae8edb1aea81c13cf3cf0338279c7a58a82830b4867d2f11efd36b7ab5c2885e7b33b1c89cfe6c1c4d67539128a36b26996388a2685d4b27d4487d7986b6ede1eafe4ab8e909a4423229627f7f8b88af63b6d7d5c276d83601f03b4e9492a5433078ade6abfe38b838264bd4619d02aa2755b0a2f97afd90d685161ace34d0b2ef008aaaf463e887aba0c6678d0d023624802a4e9c24fedbbb019fe51502190683710a2e4aee7096a1cc12ce7b1942b92801b2adeb4845c5bd69f9b401bf2efe3580b7b6962f56bdd1cb50cfab28037930f4806a54a1c704f038d731fe7d65e4e77eb193b31a6afb412401d5792a7100d8286b4e4c5b0247148a02d7199cf8d0b4e64c5f920932ea910b27e2786ae5dd14b1ca46bd9fcb77589a9b53d3e039371ee2100ef98f30615757814ce7631fc79a0ee3932436cea604ce96eb22866b2f7590120f1eea51db86974469e533a8616b3308c7bc9e97bb41875b4c7a51c16381228a934761aba65dd83144822de5167711af7ac3a6ef266799776d8890cc92cb7f0f4b9d1a81ad6b56c5fd335feb6bdfb