brisan.qc.to

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 4a:e4:81:16:19:a4:81:8c:20:ff:27:41:1c:51:64:f2 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brisan.qc.to

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:e4:81:16:19:a4:81:8c:20:ff:27:41:1c:51:64:f2
Serial Number (int): 99549333553624162523635340572407981298
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9f:18:c6:44:f4:3c:dd:26:5c:00:10:c2:5f:26:4e:eb:84:e6:48:aa
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 43:69:79:9d:59:98:fb:cd:32:28:9a:6c:65:1c:b8:0d:b9:dc:f7:c0
Fingerprint (sha256): 06:92:ce:7e:0c:07:e6:98:cf:77:d8:0d:63:32:f1:8e:5d:79:88:52:e3:cc:15:42:6e:50:da:bf:1b:c1:31:bb

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate brisan.qc.to

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brisan.qc.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brisan.qc.to

Other certificates including the domain name qc.to

(limited to 100 certificates)
rslex.qc.to
rswqdya.qc.to
isaf.qc.to
metahum.qc.to
sokora.qc.to
ngmt.qc.to
jofnes.qc.to
npebwhk.qc.to
toba.qc.to
ydfrtew.qc.to
ujyjp.qc.to
jyxf.qc.to
gnkclik.qc.to
akitis.qc.to
mblake.qc.to
fvfv.qc.to
foodesignet.qc.to
wertzcandy.qc.to
beytty.qc.to
wwddg.qc.to
lyumjcf.qc.to
voic.qc.to
fb.netwrk.qc.to
irhd.qc.to
gawallypusa.qc.to
gordon.qc.to
lpli.qc.to
mcarthu.qc.to
blanjff.qc.to
lignarius.qc.to
webmail.birac.qc.to
stalbanscivicsocietys.qc.to
hxcz.qc.to
lvncim.qc.to
db.qc.to
robert.qc.to
naony.qc.to
tngtetds.qc.to
werguwetan.qc.to
dmningh.qc.to
c3.qc.to
iuyny.qc.to
underby.qc.to
potr.qc.to
best.qc.to
kbdyy.qc.to
caramembuatwebs.qc.to
iwritemyhearts.qc.to
kamus.qc.to
witlder.qc.to
kjauay.qc.to
ltmyf.qc.to
siwanv.qc.to
xeon.qc.to
vetppci.qc.to
nkimin.qc.to
watkins.qc.to
simonialparadox.qc.to
hsoe.qc.to
kgpo.qc.to
byoxo.qc.to
matyti.qc.to
rntiagh.qc.to
maiden.qc.to
elseti.qc.to
appint.qc.to
riaki.qc.to
box.qc.to
cidfvwe.qc.to
hastritoka.qc.to
coachingsecuritetravails.qc.to
frsbdxn.qc.to
mugglepride.qc.to
kwnijse.qc.to
rfie.qc.to
johne.qc.to
xzvmy.qc.to
knua.qc.to
toon-orgies.qc.to
ex.qc.to
nbwmxai.qc.to
cloud.qc.to
kaulahjantungku.qc.to
rakuti.qc.to
spearman.qc.to
cxbr.qc.to
ancart.qc.to
ehqrrov.qc.to
imbh.qc.to
sadbin.qc.to
lamaison.qc.to
testnet.qc.to
humunkare.qc.to
dodqe.qc.to
prxt.qc.to
jnwq.qc.to
tapkro.qc.to
xeon.qc.to
qnirni.qc.to
sokoloff.qc.to

Certificate

The complete raw certificate details for brisan.qc.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAuvR5U5VLw1+AcQzeMw
C3fM2O8FKHnLIf/WRFpm6oSVwa9ixF5kf26AhHxYf9IIQOUAQSH0qolc+oGc5MlF
1pbpvrKTw7eTM/P6lvQJVU6TGoVSPVIWvVYWI5Z3ZweqA+1HJ7CuI0ZopjjKLc/j
mPJmLJ2Vonm71DaQVUinCBlqLeku+fXJmhAVCLYYWM1RIhG5IJCKqmu+7kS61mfU
YjGGnrNCLQxx0CsYrblUHtL3H1sWDXDI64HNrBWoNlTbKueXE45qD1RYrFYu3rnw
Xoyw0InUqayFVjVFP808ukt3IaosyVQLIkb04/Z5F9OvLSrrqekgOnzHJr9sKU3+
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99549333553624162523635340572407981298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 23:20:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 23:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'brisan.qc.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24243516486909159732829009531535111933630411566489023684179097559468316847035937117523127552011556886224143772587839360940938482606058547476256836125005331777641394745947253074939915656486795365932034941067592373546745127032856536121250221989045369297597108151274895190503578487105178873050781757444954103863896673984498479573203156036837529682685439222652536543711587297297242575820326982399009364975244681457844275719572836618975278553509132049161054274237076032861882712937679365197706711498564266501671867099985786124177404467551211933459245725053017492412812402792118993344099674954950908626664585754121448849147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisan.qc.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f18c644f43cdd265c0010c25f264eeb84e648aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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