supplychain.go.wfp.org

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 01:b9:94:ca:c8:9b:7f:75:5e:4c:89:51:6b:b5:71:e2 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=supplychain.go.wfp.org,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b9:94:ca:c8:9b:7f:75:5e:4c:89:51:6b:b5:71:e2
Serial Number (int): 2292820777409014684717506226837352930
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ab:9a:c0:a9:77:08:ca:95:92:d2:3f:10:a9:85:90:89:c1:26:62:52
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 53:fd:3f:19:ae:7b:24:7d:a8:fa:a0:79:78:5b:d0:61:d6:6b:e5:7f
Fingerprint (sha256): 0b:3a:c2:81:2b:3f:66:8e:d9:87:39:7c:64:5f:c6:25:94:75:e2:14:1e:d3:79:59:07:ac:1d:9e:c8:e7:ee:c7

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate supplychain.go.wfp.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supplychain.go.wfp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

supplychain.go.wfp.org
www.supplychain.go.wfp.org

Other certificates including the domain name wfp.org

(limited to 100 certificates)
helpdesk.travelleaders.com
speakto.ner.wfp.org
helpdesk.travelleaders.com
api.efs.wfp.org
*.sdn.wfp.org
wga.wfp.org
5728757302165504-fe2.pantheonsite.io
app.dev.mealstracker.lbn.wfp.org
5728757302165504-fe2.pantheonsite.io
partnerconnect.wfp.org
helpdesk.travelleaders.com
api.dev.comp.wfp.org
servicedesk.nga.wfp.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
*.opweb.wfp.org
*.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
training.comet.wfp.org
gis.tur.wfp.org
partnerships.comet.wfp.org
ko.donate.wfp.org
docs.lms.wfp.org
qa.dashboard.wfp.org
staging.spaplus.wfp.org
kontext.wfp.org
dev.api.efs.wfp.org
openid.auth.wfp.org
speakto.cod.wfp.org
partnerships.comet.wfp.org
job-listing.wfp.org
openid.auth.wfp.org
helpdesk.travelleaders.com
speakto.mwi.wfp.org
helpdesk.andersonmt.org
indblik.wfp.org
helpdesk.andersonmt.org
dev.maps.slv.wfp.org
api.dev.dashboard.wfp.org
etcconnect.bgd.wfp.org
mobile.less.wfp.org
farm2go.wfp.org
5728757302165504-fe2.pantheonsite.io
docs.gefs.wfp.org
*.guesthouse.wfp.org
go.docs.wfp.org
api.wfp.org
dev.vulnerabilityneedsreview.syr.wfp.org
qa.scope.eguide.wfp.org
irm.analytics.wfp.org
*.comet.wfp.org
mail.wfp.org
action.bangkok.wfp.org
training.simsas.wfp.org
helpdesk.andersonmt.org
supplychain.go.wfp.org
pit.cbt.wfp.org
esm.wfp.org
*.schoolconnect.wfp.org
speakto.uga.wfp.org
maano.api.wfp.org
*.hosting.wfp.org
mobile.wfp.org
wfpapi.dev.beneficiaryenrolment.syr.wfp.org
ja.news.wfp.org
servicedesk.frauenthal-automotive.com
api.simsas.wfp.org
membership.executiveboard.wfp.org
helpdesk.andersonmt.org
api.pos.syr.wfp.org
qa.oevmis.wfp.org
helpdesk.andersonmt.org
5728757302165504-fe2.pantheonsite.io
5728757302165504-fe2.pantheonsite.io
buildingblocks.jor.wfp.org
ssd.wfp.org
training.spaplus.wfp.org
5728757302165504-fe2.pantheonsite.io
wall.wfp.org
5728757302165504-fe2.pantheonsite.io
helpdesk.andersonmt.org
portal.sen.wfp.org
dev.plusschoolmenus.wfp.org
5728757302165504-fe2.pantheonsite.io
qa.plusschoolmenus.wfp.org
spring.wfp.org
5728757302165504-fe2.pantheonsite.io
panorama.wfp.org
5728757302165504-fe2.pantheonsite.io
status.api.wfp.org
helpdesk.andersonmt.org
*.selfservice.go.wfp.org
qa.its.wfp.org
qa.comet.wfp.org
integrator.efs.wfp.org
dev.auctiondigitaloffice.wfp.org
wob.dev.oims.wfp.org
catalog.efs.wfp.org
donatenow.wfp.org

Certificate

The complete raw certificate details for supplychain.go.wfp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsX4Ky9hVDj/8EjGpDFS
DH7JTH/h561nJJfFUeAh5faEDLx1oGuiQwUw1RGzetWXnS0DSRloP1JGB486lwBU
1yL8T0UPebdRBToEFwxmHI0AemsnvPn199WkqaBrF+m0JN0oxMUqMZkeNauTdo92
z0j147SEBWtz8Iuhnt0wQRketXBRa5HpspW8O6LuoZOiYHoJ91nmDpdpLdgd4de7
yL6Ttnj7kaZxvUqrf4dLVZunWpVhMzCvm0Z2Ofjq6K6yhjywoAOpWqoQ45STomwk
8cv2C1d7+oLTYLNvUEDIE/S2IEd3JzznLHFwx91eeZqrC3tRHJn9t1S6WYAtEIqw
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2292820777409014684717506226837352930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supplychain.go.wfp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19538321318762223566736291113448821968254394355488938144177490706972526556079031245296569699579263007127639343540929257701491018166249458099208991284175470767005250889702267997082900674742496940434061530999242984046491347196497978606749684653788442039111211722266702850093051337288390100643091051586749460498665859443298149870052677676964395599755030904866279613941895228398835844848621730124446224920217816690411533661200296963430978144553977877506218151071317380966555488988581782848807348118686764300669955777261559680709456676148455957045056482368523443798896391146788901701009209453137675120358066668113192726549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab9ac0a97708ca9592d23f10a9859089c1266252
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplychain.go.wfp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplychain.go.wfp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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