irm.analytics.wfp.org

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number fe:74:0a:dd:46:3d:5c:31:d1:6d:7f:7e:d4:5b:7a:8a was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=irm.analytics.wfp.org,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): fe:74:0a:dd:46:3d:5c:31:d1:6d:7f:7e:d4:5b:7a:8a
Serial Number (int): 338226437720216754430787767449736149642
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fe:4c:b6:8b:1f:dd:cd:7c:39:ea:ee:e2:37:3a:79:a8:a9:b6:b4:fa
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 7b:c8:b6:00:e4:1f:83:8b:f2:14:8e:ea:9a:cc:52:71:07:cd:54:0c
Fingerprint (sha256): 0a:8d:20:52:22:6e:89:9e:ca:a8:de:30:39:10:54:9e:1b:12:41:97:f0:bc:5a:c9:a6:2d:fc:a5:7d:ed:51:a8

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate irm.analytics.wfp.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for irm.analytics.wfp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

irm.analytics.wfp.org
www.irm.analytics.wfp.org

Other certificates including the domain name wfp.org

(limited to 100 certificates)
helpdesk.travelleaders.com
speakto.ner.wfp.org
helpdesk.travelleaders.com
api.efs.wfp.org
*.sdn.wfp.org
wga.wfp.org
5728757302165504-fe2.pantheonsite.io
app.dev.mealstracker.lbn.wfp.org
5728757302165504-fe2.pantheonsite.io
partnerconnect.wfp.org
helpdesk.travelleaders.com
api.dev.comp.wfp.org
servicedesk.nga.wfp.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
*.opweb.wfp.org
*.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
training.comet.wfp.org
gis.tur.wfp.org
partnerships.comet.wfp.org
ko.donate.wfp.org
docs.lms.wfp.org
qa.dashboard.wfp.org
staging.spaplus.wfp.org
kontext.wfp.org
dev.api.efs.wfp.org
openid.auth.wfp.org
speakto.cod.wfp.org
partnerships.comet.wfp.org
job-listing.wfp.org
openid.auth.wfp.org
helpdesk.travelleaders.com
speakto.mwi.wfp.org
helpdesk.andersonmt.org
indblik.wfp.org
helpdesk.andersonmt.org
dev.maps.slv.wfp.org
api.dev.dashboard.wfp.org
etcconnect.bgd.wfp.org
mobile.less.wfp.org
farm2go.wfp.org
5728757302165504-fe2.pantheonsite.io
docs.gefs.wfp.org
*.guesthouse.wfp.org
go.docs.wfp.org
api.wfp.org
dev.vulnerabilityneedsreview.syr.wfp.org
qa.scope.eguide.wfp.org
irm.analytics.wfp.org
*.comet.wfp.org
mail.wfp.org
action.bangkok.wfp.org
training.simsas.wfp.org
helpdesk.andersonmt.org
supplychain.go.wfp.org
pit.cbt.wfp.org
esm.wfp.org
*.schoolconnect.wfp.org
speakto.uga.wfp.org
maano.api.wfp.org
*.hosting.wfp.org
mobile.wfp.org
wfpapi.dev.beneficiaryenrolment.syr.wfp.org
ja.news.wfp.org
servicedesk.frauenthal-automotive.com
api.simsas.wfp.org
membership.executiveboard.wfp.org
helpdesk.andersonmt.org
api.pos.syr.wfp.org
qa.oevmis.wfp.org
helpdesk.andersonmt.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
buildingblocks.jor.wfp.org
ssd.wfp.org
training.spaplus.wfp.org
5728757302165504-fe2.pantheonsite.io
wall.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
portal.sen.wfp.org
dev.plusschoolmenus.wfp.org
5728757302165504-fe2.pantheonsite.io
qa.plusschoolmenus.wfp.org
spring.wfp.org
5728757302165504-fe2.pantheonsite.io
panorama.wfp.org
5728757302165504-fe2.pantheonsite.io
status.api.wfp.org
helpdesk.andersonmt.org
*.selfservice.go.wfp.org
qa.its.wfp.org
qa.comet.wfp.org
integrator.efs.wfp.org
dev.auctiondigitaloffice.wfp.org
wob.dev.oims.wfp.org
catalog.efs.wfp.org
donatenow.wfp.org

Certificate

The complete raw certificate details for irm.analytics.wfp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/PAQQ218s1MtJYjqVS
/V7ZsPwhFQGcBEOZmeau3C76fvjPNp5O8cHPeBN9Sd2flEMxDYY7m99+EeU48Bxj
toAkj/KT54Eq5o8VWb5MzsKJRd4NjuxER2sEO3Kvb6nS5FCAZwPvANQLm8XJfYfD
l08Q1vwa1seMRSwjf4Cye/vixIoq99Cbi7kpF5w1AFS4kQDMbizZlTlAwEQFWhTB
yZvW2r7sBebEE+VSu29lSmfiwWnHWJIe3Lb/MyTKEbbotxeOaDtPVtjaCMGBEsDr
ovaksCrgVL8lXRKQhiw4JZDkq9ZWUjErUwAPhhHKwqkcp92KfpkVvlVGMsX1BTjj
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338226437720216754430787767449736149642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'irm.analytics.wfp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27859121548905629649299408722600921224001173909915581129776960395146777362379479848620569380507105720609164090428275440534028528850793291620736111729485685742633301602218405153940817965600360466570792279056027794021945949336545704476900243959748519172566918788981060464199276696044607869249920989186843238686231938072967194029914585520924567658824803635434259482755087538006795092032360315326452154073322802347566617849940258371663925723188445029855119163815416484292108105269116764325491768250304970374004329307312843459178040118801355153690691945698339143097429855217619549521996438763074241202253509054017492804589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe4cb68b1fddcd7c39eaeee2373a79a8a9b6b4fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.analytics.wfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irm.analytics.wfp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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