covenanthousetorontoevents.ca

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 25:f9:52:23:f1:0a:f1:0b:fa:46:63:2e:21:8f:53:20 was issued on by Sectigo Limited.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=covenanthousetorontoevents.ca

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 25:f9:52:23:f1:0a:f1:0b:fa:46:63:2e:21:8f:53:20
Serial Number (int): 50475983766989361749582609322347549472
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 97:eb:30:d4:c8:eb:8f:26:4f:ff:69:46:1c:ff:5c:0a:30:ab:6a:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 72:7a:b3:45:37:82:b1:15:b8:30:3a:66:0c:65:9d:b7:94:08:7c:16
Fingerprint (sha256): 03:0b:be:0c:31:da:fa:d5:db:31:65:0a:0c:68:d8:4f:31:a5:31:89:4a:98:ab:c7:ff:89:ed:f5:a1:40:a1:76

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate covenanthousetorontoevents.ca

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covenanthousetorontoevents.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

covenanthousetorontoevents.ca
advanceconcordia.ca
crowdfunding.mcgill.ca
donate.ccla.org
donate.humanitariancoalition.ca
donate.oakvillehospitalfoundation.com
donate.ottawafoodbank.ca
donateoakvillehospital.com
fundraise.care.ca
fundraisefornygh.ca
give.lhfoundation.ca
give.orbis.org
m.supportthepmcf.ca
qa.raisin.events
raisehope.ca
secured.hope-international.com
supportmackenziehealth.ca
supportthepmcf.ca

Other certificates including the domain name covenanthousetorontoevents.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for covenanthousetorontoevents.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppmIivv63keVPporf66
HnHB67LKLLaDt5EJrp8OC3OiaFzpouHnqjYLpPLLmhfA0uEUGEc8oL7ACWxKw8Of
Hh8doNMgdKawZxFpiNrqaAunlAqDNDeA3cMjFwycIYxWHxQSJ40CT69e1rUkVTXi
ma377WF1f62jR6aQotWg06Qw9xpXpDDN42jvnzJcVKIpH4XbHvvBE8EfC57sn8Ao
iPs2cfxmPYahvALKIalzKJ2t/PaYmq4917RPLXwOcmABBvh4Ko4unlLiWyPUhpi3
75WbJ63a3e9R8LG35/pdVXj1iMJQqMqW9jJRj6OaZSj27UM0EeSGoA0p5c0KK7zc
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50475983766989361749582609322347549472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covenanthousetorontoevents.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051508468128501760205140336111892565828501383844638708892380235511002640525186778606097892053669106199893697436100743289862828574048665375000074969118577241303761527967972016276656550001222424608906564696232373885413873555504261582433494873310111420862423101608857443570931913436903032267616118020406102988003533610215607220036023487345024265518473660632639321605593260583669593977309537455413777833997640467059888746576833693377883798540259995236347203500091363374977577748394252791934383077901459066856618076858893678165098086450433628200945796429887421434076341618241884140343408326682087166630189376500899044473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97eb30d4c8eb8f264fff69461cff5c0a30ab6a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceconcordia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.mcgill.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ccla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanitariancoalition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oakvillehospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ottawafoodbank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateoakvillehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.care.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraisefornygh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.lhfoundation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.raisin.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisehope.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.hope-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmackenziehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportthepmcf.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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