join.norcom-usa.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 2c:ea:43:45:9e:6a:bf:dc:da:fa:5b:8a:e6:7d:46:4a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=join.norcom-usa.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:ea:43:45:9e:6a:bf:dc:da:fa:5b:8a:e6:7d:46:4a
Serial Number (int): 59702393716647789953713965979689371210
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 1a:35:b1:70:02:da:29:d8:64:53:89:34:76:32:38:98:7a:12:04:32
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): ef:ec:d1:4c:45:0e:26:bc:52:fe:78:29:a5:d0:2f:c8:ef:cd:6f:3d
Fingerprint (sha256): 05:f8:f3:fa:14:eb:b0:bf:d8:70:70:7e:52:93:33:f0:30:5e:c1:45:c0:e7:c9:f8:0e:6b:7b:b9:61:6b:f9:bf

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate join.norcom-usa.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for join.norcom-usa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

join.norcom-usa.com
www.join.norcom-usa.com

Other certificates including the domain name norcom-usa.com

(limited to 100 certificates)
sni65131.cloudflaressl.com
intranet.norcom-usa.com
sni65131.cloudflaressl.com
norcom-usa.com
tls.automattic.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
archive.norcom-usa.com
sni65131.cloudflaressl.com
join.norcom-usa.com
mail.norcom-usa.com
easycare.ch.fcm.travel
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
remote.norcom-usa.com
easycare.ch.fcm.travel
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
grillednburgers.com
easycare.ch.fcm.travel
archive.norcom-usa.com
tls.automattic.com
archive.norcom-usa.com
support.norcom-usa.com
tls.automattic.com
tls.automattic.com
sni65131.cloudflaressl.com
easycare.ch.fcm.travel
tls.automattic.com
tls.automattic.com
easycare.ch.fcm.travel
tls.automattic.com
settlement.norcom-usa.com
norcom-usa.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
tls.automattic.com
sni65131.cloudflaressl.com
www.valuequestamc.com
easycare.ch.fcm.travel
sni65131.cloudflaressl.com
norcom-usa.com
tls.automattic.com
support.norcom-usa.com
join.norcom-usa.com
sni65131.cloudflaressl.com
support.norcom-usa.com
www.valuequestamc.com
sni65131.cloudflaressl.com
easycare.ch.fcm.travel
settlement.norcom-usa.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
easycare.ch.fcm.travel
portal.norcom-usa.com
tls.automattic.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
tls.automattic.com
tls.automattic.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
support.norcom-usa.com
sni65131.cloudflaressl.com
tls.automattic.com
tls.automattic.com
sni65131.cloudflaressl.com
www.valuequestamc.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
tls.automattic.com
settlement.norcom-usa.com
sni65131.cloudflaressl.com
support.norcom-usa.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
easycare.ch.fcm.travel
tls.automattic.com
vdi.norcom-usa.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
www.valuequestamc.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
www.valuequestamc.com
www.valuequestamc.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com
archive.norcom-usa.com
tls.automattic.com
www.valuequestamc.com
sni65131.cloudflaressl.com
support.norcom-usa.com
sni65131.cloudflaressl.com
sni65131.cloudflaressl.com

Certificate

The complete raw certificate details for join.norcom-usa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3g+ltFH077GQLEqqMhG
mGl8c8gCb3ply2DdQjLYwMGDEiDf6kmE1FQUlgm0xitM0xj9iCs70ZziX6UNSlK9
tTcl+/N7S5+BAAUKFlvYhA5M3g8Ixpd8EqwOZKwcdkeJ5RQRsXtG6tD57q9skc3j
nSO4JLHcbClm74K9Q0118p51uKyHk48cWmahAl6KlQgEdcHdYpl6T4NND1ZJPwfs
KaDNXHAWyEXgu0g1IWjWoOhBnJQ3zCLvkUTeUhMOraoGSjosofFs5CRJFO7sKDIN
dYIabK/aHI7o4bvTJdycAO4o2RzqIZ55o9Q1fx5UKNN0GqVvKYfqwA2PGWNrgaNJ
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59702393716647789953713965979689371210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'join.norcom-usa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25685670675479703394669855660241905287011036672182130918267926390853019920971214208697836196623077413107086331301937719458706148793104198430139529206309302540314023503293065265936893849683627426893656783579776984089814156870630842560648430853786295094557381250762510400112262179873900878129851679191974684836516818892816492885349191884763696636852439480905440712120104491207927071831388796909676980721889122245250817930222050427019676518470213992803875929358813938203374913295335025644250317437807085819376995241988584996764959244656676267495075718301402754776231493478982592791731458876477907660892885610718436739569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a35b17002da29d864538934763238987a120432
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.norcom-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.norcom-usa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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