www.dana.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b0:2a:b0:ef:4b:07:66:88:65:da:4b:6f:3c:23:4f:5e was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dana.org,OU=Domain Control Validated+OU=COMODO SSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b0:2a:b0:ef:4b:07:66:88:65:da:4b:6f:3c:23:4f:5e
Serial Number (int): 234165792389045062409455513799166742366
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 13:79:d6:54:8d:62:c2:40:22:35:71:13:0c:21:9d:c6:3b:0a:01:e1
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 29:85:5e:9b:ac:7a:72:6a:de:27:4c:f7:7e:76:c4:eb:9e:6d:06:a4
Fingerprint (sha256): 04:4d:d4:b8:83:5d:0f:e2:37:c5:25:a6:4b:ea:5a:16:fd:c5:1c:ef:13:55:20:31:1e:40:08:77:f2:66:3a:5b

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.dana.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dana.org
dana.org

Other certificates including the domain name dana.org

(limited to 100 certificates)
it.uahs.arizona.edu
streetfilms.org
www.design-engineering.princeton.edu
nxterra.ucop.edu
banking-business-review.com
www.blogs.earthjustice.org
www.dana.org
webdev.colorado.edu
virtual2.unlv.edu
hub.meed.com
www.dana.org
streetfilms.org
good.gsm.cornell.edu
nistmep.blogs.govdelivery.com
host2.openminds.com
local3599.com
www.esc.rutgers.edu
communityadvancementfirm.com
www.bodywerks-medspa.com
www.extension.ucdavis.edu
inside.gc.cuny.edu
5630742793027584-fe4.pantheonsite.io
nartc.fcm.arizona.edu
abong.ufcespanol.com
vpn.dana.org
5630742793027584-fe4.pantheonsite.io
banking-business-review.com
*.dana.org
nyexchange.dana.org
161511-web1.vilcek.org
www.dana.org
161511-web1.vilcek.org
asikmpo.discoverlosangeles.com
161511-web1.vilcek.org
international.dev.oceana.org
www.advising.arizona.edu
admission.gsm.cornell.edu
161511-web1.vilcek.org
*.dana.org
www.apac.arizona.edu
junk.dana.org
brainawarenessweek.org
afscme57.org
2fsupport.govdelivery.com
nxterra.ucop.edu
www.nartc.fcm.arizona.edu
161511-web1.vilcek.org
aaupnet.org
alldata.com
banking-business-review.com
sters.us
5630742793027584-fe4.pantheonsite.io
alldata.com
wireless.unlv.edu
deanbphilips.com
deanbphilips.com
hepwebstudy.org
intranet.olivecrest.org
banking-business-review.com
deanbphilips.com
streetfilms.org
streetfilms.org
161511-web1.vilcek.org
agenslotgacor.gsm.cornell.edu
dana.org
streetfilms.org
alldata.com
scilsresx.rutgers.edu
abong.ufcespanol.com
internal.gcir.org
junk.dana.org
2020.sundialsolarenergy.com
www.cbs.asu.edu
cerebrum.dana.org
www.inas2.uga.edu
advance.cccu.org
projectshare.sfsu.edu
161511-web1.vilcek.org
banking-business-review.com
www.eventsinfo.presidio.edu
banking-business-review.com
international.research.ucsb.edu
online.asu.edu
5-bdrtglrsmitrpcya.centricconsulting.com
ordbc.arizona.edu
alldata.com
international.research.ucsb.edu
www.archydro.crwr.utexas.edu
on.dana.org
161511-web1.vilcek.org
banking-business-review.com
2021convention.ncte.org
aaupnet.org
radsafe.berkeley.edu
161511-web1.vilcek.org
seotest.clorox.com
5630742793027584-fe4.pantheonsite.io
junk.dana.org
2fwww.govdelivery.com
www.acims.arizona.edu

Certificate

The complete raw certificate details for www.dana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uj3HmFvFUmYWS9hscgh
eEUixwjcASe01iXszFTbAPvhYtoY62sODNSDfvWgPQUEyjbRkNj/v6ovSyotEnc3
tywgM5mGEcEvdybQfyGjgsw3Rz6qe9sLfyTi9DBfO9brzIEYKAy6og6dlG9EbnaQ
jAeYE7/92IkH55DWz6ujJo5ChyoOyrG+R01+7iXd1DYp72zJtZAKAKp3gT+sJ1Zj
sNKXV3SIDAULtlaKgPYZ2reyT2BEGHM0/pMSyZON+UOyf7CeKTmFB0KDpDEfVHL2
ldMt01wdxhOUMN2FJcVKPR5YqftO7+3K2fuP8yEJD3Rz+HSx/mkctbtgoNDSO7dg
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 234165792389045062409455513799166742366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26419786271959197623287540234237186614674080499192703394710408226116580881371894909943320966742135565050297984894538181559109354830732950507754786615397654043544303801740537140529321717984191046414888594562570552736676632380361546360634691499204935427992076706081644167938949307604671547837724676098657364496887477897539525841699117673442469289154646466072101638202048139606312061660151596053288687422567123176965930445601706769260716738533884123423639741670106439089401406732464177361043429297409445503872075723669700161443987216363101834547227401988563016573490190640055869913440254573103919562825015827115550400601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1379d6548d62c240223571130c219dc63b0a01e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dana.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b99df0a350000040300483046022100bd83c246caf1c9c3deb94f4b854129f30cb24bd0a175cc46112798eb82f0941c022100cb3ccae892754bb328c19a93d104f0e401f653859799945901aacf409cf229f60076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016b99df0a56000004030047304502202da42747d25a18505366d4fd6167ec5cee352de11180511480f269b8f47b0c69022100ee82b839ff01330944fb2b6b640dd3e008a716c3cf0f249c5b0ac0ed94723f4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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