*.creditea.com

- IPF Digital AS -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:ca:91:c6:b0:b5:95:90:85:2d:07:95:47:84:59:ef was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IPF Digital AS

Organization: IPF Digital AS
Locality: Tallinn
Country: EE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:ca:91:c6:b0:b5:95:90:85:2d:07:95:47:84:59:ef
Serial Number (int): 18331764601885532445703376801508907503
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:7d:d9:93:84:34:a0:1e:0f:72:b7:e5:6f:ee:b7:45:00:2a:a6:46
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 73:37:71:21:c3:52:22:ba:0a:83:d8:9b:dd:92:aa:5c:a6:c5:79:3f
Fingerprint (sha256): 07:3b:66:c7:fa:5a:8c:35:2c:9f:c7:c6:ba:46:d0:44:27:a8:39:45:0a:6b:46:6f:d9:e7:62:42:1e:c3:d0:f9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.creditea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.creditea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.creditea.com
creditea.com

Other certificates including the domain name creditea.com

(limited to 100 certificates)
*.creditea.com
imperva.com
*.creditea.com
kapsecoaching.com
*.creditea.com
aishwaryagupta.fr
coronaviruslive.io
*.creditea.com
*.creditea.com
prestamofacil.creditea.com
credito.creditea.com
credito.creditea.com
*.sit.creditea.com
*.creditea.com
*.creditea.com
nba.sportsiq.ai
*.creditea.com
www.solal-experience.com
*.creditea.com
prestamofacil.creditea.com
akamai-san165.exacttarget.com
s2.ikut.app
coronaviruslive.io
www.avatarsmith.com
firebase.inmind.ai
akamai-san165.exacttarget.com
*.creditea.com
bingsu.jp
credito.creditea.com
imperva.com
*.creditea.com
*.creditea.com
*.creditea.com
prestamofacil.creditea.com
*.creditea.com
www.solal-experience.com
credito.creditea.com
*.creditea.com
player.disign.tv
imperva.com
*.creditea.com
*.creditea.com
prestamofacil.creditea.com
*.creditea.com
akamai-san165.exacttarget.com
prestamofacil.creditea.com
imperva.com
prestamofacil.creditea.com
philanievolk.com
bytsocial.org
*.creditea.com
*.creditea.com
*.creditea.com
credito.creditea.com
credito.creditea.com
*.creditea.com
www.giggleleaf.ca
prestamofacil.creditea.com
*.creditea.com
prestamofacil.creditea.com
akamai-san165.exacttarget.com
imperva.com
akamai-san165.exacttarget.com
*.creditea.com
imperva.com
imperva.com
prestamofacil.creditea.com
*.creditea.com
stylizz.co.il
credito.creditea.com
www.allagentplaner.com
*.creditea.com
stylizz.co.il
credito.creditea.com
macutriviaseg1.sqwadhq.com
prestamofacil.creditea.com
*.creditea.com
credito.creditea.com
*.creditea.com
stage-api-docs.carecens.com
*.creditea.com
*.creditea.com
philanievolk.com
www.avatarsmith.com
*.creditea.com
testflight.puzzle.live
*.creditea.com
*.creditea.com
akamai-san165.exacttarget.com
credito.creditea.com
*.creditea.com

Certificate

The complete raw certificate details for *.creditea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GuiT9wI6mxXtdAhdwf
xbxMsW44WkcLhgkNKtE0XoN/6FPZRw2bhBa8rQnSBWJBHjFleSOOffb//be/Rwo3
Af0fpM2yxKferMpgh+bxefgOQcniG3thfZgnzkxXVtwfuCtamyBBnOE8p93xlvFr
ajIHHWjMyeMK/kBOejlrO/VN5awRfPrZIacSQhezItEDgMIG63TNa6f90rl7uRc7
0IDYCsF2+QWJySmCTaekXIj750bdbVngeU5Bghg3hGiWzocL2kd4JCYLgpo6P/pE
3NkumGOEC/Fynbfdg+msbp4xDLRRYL8+PiCAuC4PQWi9wTpEQ+CCyjSJVZbyDts0
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18331764601885532445703376801508907503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tallinn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IPF Digital AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.creditea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23717850862981027758389428108265013835995541225020075206514799872173161426206566329319739611290332525792803901249188743527637528814034478750056871770410531545862794906386960431536942252279681025618743949956689556864209045233137478236413029552037981480966469676191620558784564390893348756320570119842071239475631071376049167111014158321968760563283343315418609345544730555908326846989444351310382489363392565576802778236665635103577727538061758979991289528738112039645910318648952730148608930224450156122267316156194932914916221997744889320481459828951149962605232556938548378678364442714053706664673305034354226574397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a07dd9938434a01e0f72b7e56feeb745002aa646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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