*.cpk.com

- California Pizza Kitchen -

Issued by Network Solutions RSA OV SSL CA 3

About this certificate

This digital certificate with serial number e1:bf:27:b9:4a:91:e4:83:bd:b0:eb:03:2f:80:c4:39 was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

California Pizza Kitchen

Organization: California Pizza Kitchen
State / Province: California
Country: US

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e1:bf:27:b9:4a:91:e4:83:bd:b0:eb:03:2f:80:c4:39
Serial Number (int): 300068833445849095134828809629399565369
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 54:ca:aa:65:23:12:b6:85:1a:81:44:d9:e6:e6:50:32:86:f2:0f:e4
AuthorityKeyId: ea:25:ff:5c:9f:4e:4f:4e:c1:14:a0:db:ca:be:ab:f2:e2:e2:78:a4

Fingerprint (sha1): ce:29:e1:27:5d:8b:fe:ec:9a:80:75:d4:44:12:9b:14:b0:d4:85:cf
Fingerprint (sha256): 07:88:a1:69:45:b7:54:38:82:92:2c:df:a5:3b:a5:bc:26:20:90:6e:4a:9f:25:95:4e:b8:e4:f8:d1:8f:3b:ad

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl

Check the revocation status for certificate *.cpk.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cpk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cpk.com
cpk.com

Other certificates including the domain name cpk.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.cpk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3SNiRisJE05psC+jRU0
SvCah8ZkVhh1xMr9pKYMg4lfvwWrukJs+T7Iwm6WPOnDLJsuLXpdFU9vt5V3elph
Gl6gkb6P7CR6AAuHo+p7GBt/6w2kwuctNvbnzU1ZWrbydzoFCH+7/C76tC2u1E2/
zhGf6LGGVKJjeRjlNSHKfDC9EIoCcVIY/DiSkmLrs04PjQGe+4Wjdl6P/oxIEfQh
DsYqcBHZndn5YuUHFMIksQm2Dk6GSL8KCY0KkL6Yeh6Yj3D0brdcNETfOPR9gkgI
hiGqvIfylm42hGbblGBOZ+49JCTqLxdsdYvgeWQcAesDdkclHJ5zabdaceQB7OsE
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300068833445849095134828809629399565369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions RSA OV SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California Pizza Kitchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cpk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21644224513057341745889154239221939011594041729097312634100929072988825835962207912912899192177787121940064524776371489723337252431255574179729265620962921202308051363825869730476290189574289343971439154074450644591368821191876537221040771844931009159359962762371559419428956523489646783071316517509464633412074263178400635448920211207083754875927634689469919440871401697240971176778006273092211105481806592493801020317456138675805734622078166760272595705075098221588965444114213895064204715681161489123475573680173632051372418735365915243896477443511679690759886765275563871627474266452376003388931016236935399802049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea25ff5c9f4e4f4ec114a0dbcabeabf2e2e278a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54caaa652312b6851a8144d9e6e6503286f20fe4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		00453252797f1c0f3dc9282b3ec6e12f90e58d4433567a768baf34f4a93414c487257f89c28815688eeb61e8de1e58b32ae31a0acd7207623c08fd3d6b2ee6afb1dd1c3f70b0626e2042ad1d074613721635ce3c8f8fecedad8e0d26bec0fd7396aec5b17afbed79bae8cd861069aca0fd558dd73ea2d86c9de8cb22bead6813831aa5b275d0e27d61e3a5f493f06ed8eb491cb87b914595bc09cabd674c2722b9aaaa67db9d11c46aa3afa0fc38be882c5a39d1b882fd6fbc828303639150dc061f05b073511571cb616ba67b6a082fc2f581529537ef00e60fe28a9d857a7148f51d33091fa0fac4afbba5585a88564b59642bc2c314f0462b0b9aa38c5e2d18cf685f212e7ddc5fb462b184c635ee6682cf5bdfc41c6142f7111c7d4d8ce83afab61d630fad969b503a3ef592032d7847ef3914480ca8201adf8c963b278fb0d57794fab53740b29e8b46cb7a797d18069431a77defa1fab70bc1fcf84f86111b99e094fc2b916858422b531b83c7ae41d3deaeb07943735f1b3260297122ee