expirat.org

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 76:6b:ce:17:0a:08:96:49:64:b6:43:e7:3e:c5:0c:56 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=expirat.org

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate will expire on

Certificate Details

Serial Number (hex): 76:6b:ce:17:0a:08:96:49:64:b6:43:e7:3e:c5:0c:56
Serial Number (int): 157408659268214620844701272063831510102
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b6:4f:08:ed:3c:7e:cb:00:3c:2d:d3:70:a9:4a:fc:4b:66:51:fd:0b
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): 62:88:f0:f9:2e:85:aa:95:04:bc:4b:f0:3e:e3:5a:04:48:e7:d2:22
Fingerprint (sha256): 06:b0:f2:39:40:38:3a:1d:27:58:15:c6:65:a9:5c:0d:0b:d8:06:18:36:8c:04:cc:d2:68:fa:0b:3a:b8:ef:f5

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate expirat.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expirat.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expirat.org
www.expirat.org

Other certificates including the domain name expirat.org

(limited to 100 certificates)
expirat.org
energiea.ro
expirat.org
energiea.ro
app.expirat.org
expirat.org
energiea.ro
expirat.org
expirat.org
painesivin.ro
expirat.org
pubenergiea.ro
painesivin.ro
tickets.expirat.org
pubenergiea.ro
pubenergiea.ro
painesivin.ro
painesivin.ro
pubenergiea.ro
app.expirat.org
energiea.ro
painesivin.ro
app.expirat.org
expirat.org
painesivin.ro
energiea.expirat.org
tickets.expirat.org
painesivin.ro
tickets.expirat.org
expirat.org
pubenergiea.ro
expirat.org
tickets.expirat.org
expirat.org
tickets.expirat.org
tickets.expirat.org
tickets.expirat.org
expirat.org
energiea.ro
painesivin.ro
expirat.org
co23.expirat.org
tickets.expirat.org
expirat.org
energiea.ro
painesivin.ro
energiea.ro
app.expirat.org
expirat.org
painesivin.ro
tickets.expirat.org
energiea.ro
tickets.expirat.org
painesivin.ro
painesivin.ro
tickets.expirat.org
expirat.org
pubenergiea.ro
energiea.ro
energiea.ro
expirat.org
energiea.ro
painesivin.ro
energiea.ro
energiea.ro
expirat.org
expirat.org
energiea.ro
expirat.org
app.expirat.org
painesivin.ro
painesivin.ro
expirat.org
energiea.ro
painesivin.ro
painesivin.ro
expirat.org
energiea.ro
expirat.org
expirat.org
tickets.expirat.org
expirat.org
app.expirat.org
co23.expirat.org
painesivin.expirat.org
pubenergiea.ro
energiea.ro
tickets.expirat.org
painesivin.ro
tickets.expirat.org
painesivin.ro
energiea.ro
tickets.expirat.org
energiea.ro

Certificate

The complete raw certificate details for expirat.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VFypO24aQ7/VGKA4Qmd
9IaEARHVsvLjW10D333mLyry1HdP/OJDYJdYHoCAiUegH8eipP4/56SM1ORu9lDI
+XnGc1csF0/Mm2OiDIC/hPniZbU0cESohcCjy7QLgUxcUra9bsEpkOVYVAOlrGg9
lkzaYuQyAviZbL2zsG624HWfgFsioz7Sm8o4nISPUqq7CwUL9x0niytxsRAKL1q0
une9lqpM/0Y7EGGC1XOKKAgsGOVGI4iwt5ZbeVwMHFbAcgibplnJVE+fTRD613Cx
BMebGDjDjCuJGJo1M629a4FSytLUm4Ky8eEg9PcPLD7JD47VTVct82RDWK4J9qts
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157408659268214620844701272063831510102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 10:02:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-10 10:02:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'expirat.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26928922379216161680312530391826465873095143686413927421506234675120382577826394117558323491183031117854880542403715205970302761335695794082476317909015229648592478290015798279943661606880113217986612854135774765793171312915583938349198322262720396607716137083873737786678955144967689608447460368163439782859858775484051425753569835127628379126111467610227936633300339173504940886661235012351112630597388764513699907174847156891366933646647145320952017290165572127650524174013347601494440916892572911338733607814144171765736089153753667602459306543200188776652385191286115835865772725446769546584845157091292698340597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b64f08ed3c7ecb003c2dd370a94afc4b6651fd0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expirat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expirat.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00773850de397433af36fc0c905ebcafb4d9fcd729e5ade9b0dadf43e6e4a9f5ae4e5d25dd306573c2aeaa1a040a42f705a6a8eb56519c555dfb1e9511efb7f205e4b029e508161017da74e2f266233c3b2d415e5d565857d97ea333dfc06b14aee135aed2dbbc15dc07d8aebe3b22f3fc63da4b324d1f8fc0ff41df646d9e87feccdbe107d6788313b07da5388e69e7f3e895ee57da0150b96914b63cdbe8f839ef9bdb134f1d8ee345bb6cc82b7fc1bd0ccb93006e30754721526d1ed3ab94bed33d885174eac6e70a235c0f2122d1c65a631bb2b29660509728da6fd24c1ad5e1756ec33a809b01d7241f497617e7a728f66c317ed2770e69217ad3fffd8d35