www.ukishiro.net

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:c3:44:24:04:25:48:bf:c2:47:13:6e:f9:70:cf:9b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ukishiro.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c3:44:24:04:25:48:bf:c2:47:13:6e:f9:70:cf:9b
Serial Number (int): 10318475915258615167320263568229715867
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f5:85:5c:cf:bd:fc:46:8e:d9:c7:ca:33:3a:39:df:d9:e3:aa:ae:78
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c2:2b:7b:87:e7:ae:8d:d2:8b:f7:3b:63:63:5d:a0:6f:c8:5f:d7:a1
Fingerprint (sha256): 06:ed:ff:06:d8:f6:f5:92:fc:8c:14:52:f8:fe:b8:f6:9d:82:23:12:17:5e:e5:fb:7c:14:4d:af:52:fb:27:d4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.ukishiro.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ukishiro.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ukishiro.net
ukishiro.net

Other certificates including the domain name ukishiro.net

(limited to 100 certificates)
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net

Certificate

The complete raw certificate details for www.ukishiro.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10318475915258615167320263568229715867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ukishiro.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842328456297658963683060750475227126677412732489319878961347106752777572575152180867148536980255991340042147374866527426906784416063629684459214199068695920799354128135667361647543177478139229760611291163238793176891866204395525978593118987561179258080876490962981483166346160236701791249885837775480701098900566294195059102878437025834211395043325474523231200709653622895863419585358329198820882589777312791962826226820060942038711900578484488203816235656961689460862680097367337915643406148203868710726490706448082225668980385047988608935970680626010001609796286398011431368507191864219618927171919881722704522082801406576448785992595491816048015807964281399741775993500617738281845278242897647994166956422412261017433487523215205467842903881096734383133257900364270608480277318386231908323458246945614633316831860572630667402660169305696042354698789931428300423151520946359166463458122313896288298511505842329472728639354820344357726397384384811544409139239072823674770156073392101727439654973007865675959722669671520931020890815959082998635173148731330868447690487416364584439678007154712106691145671776360792987695309411206161280307341101453531149691609944896480308720811868819543507010847061196601870017570116280353426132205773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5855ccfbdfc468ed9c7ca333a39dfd9e3aaae78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukishiro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukishiro.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c2c0016580000040300473045022100e570c2a047b35d8a953877fc2289f6c83a78999c6b8d71883a5b3efb202e6c4502202a684b10cc69a0d7dc985e8d43c78ace2b3ae544e4777ae1a35ef50361abfb0a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c2c0016a700000403004730450221009d222bb2e07152896543b17388477937fe04b9a7ed61ccb22242885df508d83a02203963422d3f669e81e2db67d9cfc588f7da6c731af9cfe67f327b6d3ceb00feb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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