www.kindlustus.ee

- If P&C Insurance AS -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:af:06:bb:e6:7d:90:66:b7:c1:a9:e1:2b:64:62:b6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

If P&C Insurance AS

Organization: If P&C Insurance AS
Locality: Tallinn
Country: EE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:af:06:bb:e6:7d:90:66:b7:c1:a9:e1:2b:64:62:b6
Serial Number (int): 16859524481119947289235869622033736374
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:96:bc:3e:bb:7a:da:38:f2:ad:35:a2:13:a5:ab:4c:b9:73:83:19
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): d1:2d:54:94:84:aa:51:6e:24:be:59:ef:3e:dc:f7:29:99:2f:13:a4
Fingerprint (sha256): 0c:09:85:3d:97:44:3d:35:9d:7b:12:98:60:30:f0:59:79:04:8a:2c:c5:85:06:d6:7d:8f:66:f6:c1:d1:de:bd

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate www.kindlustus.ee

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kindlustus.ee

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kindlustus.ee
kindlustus.ee

Other certificates including the domain name kindlustus.ee

(limited to 100 certificates)
partnertest.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
partnertest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
spoint.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
test.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
if.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
www.kindlustus.ee
partnertest.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
wstest.kindlustus.ee
wstest.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee
wsprod.kindlustus.ee
partnertest.kindlustus.ee
www.kindlustus.ee
if.kindlustus.ee
wsprod.kindlustus.ee
if.kindlustus.ee
www.kindlustus.ee

Certificate

The complete raw certificate details for www.kindlustus.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16859524481119947289235869622033736374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tallinn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'If P&C Insurance AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kindlustus.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695044731671497909166298795813406992895549062759869178744262426680569344495437433055540521589412459215709088237332725316595716824468291110258295114386653093367232326965977824326256288605827515201412193057409429418149959066100718486022483183356149857160816232525581851114982857578073639587813880617750124133425141679884792961516596064077371151329512147207016731003466081656111306684121596848376274466731931439105655050114054108263059278679115341021854032662678891337757642593086759030512114732488059746882235108884900043515373503352397384611102311267046271021167767575587890600073554458196206694683405070727151238686128169464114461880575244889938618884104326846584495202374594621631627235515361915117733191532209903477843166003294494897480000058620266288911180970368490516633814930779742872786847893036250111649043708158956025251061112187485081571154073060176312581029296218206323656637424361582892894097442863191949084896788065138558549275625947420062683053183496889331929383045699682203514100245365140870448616343031194868513795044033008453941354758723141621272728109317160684040912564232761361076076917180797112958608973934700377195977726741788753861698918038722035349868907711238763348257911104742480618055757950327402984009979829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9796bc3ebb7ada38f2ad35a213a5ab4cb9738319
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kindlustus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindlustus.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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