weareavidity.com

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 5c:3f:de:7b:96:34:93:76:72:16:cd:9f:5a:54:f4:08 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=weareavidity.com

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): 5c:3f:de:7b:96:34:93:76:72:16:cd:9f:5a:54:f4:08
Serial Number (int): 122620602800782266361726798925709767688
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 60:27:50:ee:a1:fa:9a:e7:ac:be:72:7a:a0:15:ac:a9:53:54:f4:8b
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 42:d3:1e:b9:e4:99:7e:2d:a9:a0:3a:1b:09:d7:2f:d9:7c:4e:3e:c8
Fingerprint (sha256): 07:ea:99:13:e9:d0:12:b1:bd:7c:1f:20:7d:9b:47:13:7f:23:71:37:b5:ae:2b:9f:12:ce:0a:67:98:44:ed:5d

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate weareavidity.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weareavidity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weareavidity.com
www.weareavidity.com

Other certificates including the domain name weareavidity.com

(limited to 100 certificates)
servicedesk.weareavidity.com
servicedesk.vretigas.it
weareavidity.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
helpdesk.bedes.org
helpdesk.hambroperks.com
helpdesk.bedes.org
assist.pentest.partners
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
servicedesk.weareavidity.com
helpdesk.bedes.org
helpdesk.coulisse.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
sdp.vdp.com
blog.weareavidity.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
assist.pentest.partners
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
weareavidity.com
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
weareavidity.com
helpdesk.wentworthclub.com
helpdesk.wentworthclub.com
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.hertspartnership-ala.gov.uk
helpdesk.saviaantjes.be
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com

Certificate

The complete raw certificate details for weareavidity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxAnRb1lfm2gcLLvod15
4B29vdbO0ECQUoQk7+08DI1R6U75G8x9TGRDxbe7v5beLAY0Y1ASjkfkNVGaLHmw
mjQHNHTLPaToz5ix100QtbQkp1TpoUo96lztfVNot5HfrrO31ixf7tk3Fu9UrHle
Ni1FFKvFNiP2xxdyF98makgYS1+ZvgZdYZsiJi0ZAa7Q6yhYMnENw3hkRxCT5dPc
FiyfAxWmTGJBiF5MDkNeb77aL7WzXfhbGOfCZLfJ5bETkA3w0UtBLxuiqRROy/rq
vFhc/jV9cQBdIUM6aNPRfYAY34krB8f7UP3s6+KbEa9i7D0Rp8quGBNajD7WTxxQ
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122620602800782266361726798925709767688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weareavidity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20079856031916347676881295664807528283430676824457914612271171017144699714484527408331364349311206892274489940342930284164872831322236682614144731887244200872104753764534540274371348315992933817753057730995573291508502367826619034456065249095567310268572951524160976647033295199793472158107211726513530283493582754380820098182500124078221554619906859160458519701223487716032874008632374203523342752863617142389525772191036896821104030464648426577147361938580372590378608684926352950509495225073602903204483442112710383948757284077576840110691049276763350985949075658938975339355883853833061747279142738196050191601759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							602750eea1fa9ae7acbe727aa015aca95354f48b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weareavidity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weareavidity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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