secure.cvnt.net

- Covenant Eyes, Inc -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 12:cf was issued on by GeoTrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Covenant Eyes, Inc

Company registration number: 43086C
Organization: Covenant Eyes, Inc
Organization unit: Tech
State / Province: Michigan
Locality: Owosso
Country: US

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:cf
Serial Number (int): 4815
Serial Number lenght: 13 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): 5c:69:b8:40:45:53:33:4e:bb:cd:11:4c:a8:a5:95:55:03:e1:0e:a2
Fingerprint (sha256): 0d:87:84:7b:a0:89:5a:6a:2e:39:10:76:0c:70:0a:7e:84:b3:7c:4c:24:e6:1d:b1:44:3a:d7:fd:05:02:a1:7b

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate secure.cvnt.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.cvnt.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.cvnt.net

Other certificates including the domain name cvnt.net

(limited to 100 certificates)
secure.cvnt.net
soporte.cjgconsultores.com
ssl.ces.cvnt.net
ssl.ces.cvnt.net
cewiki.cvnt.net
secure.cvnt.net
it.oodc.com.ph
coveyes.com
pdlapi.cvnt.net
staging.bulwark.cvnt.net
secure.cvnt.net
support.cosmicktechnologies.com
it.oodc.com.ph
helpdesk.al-mozon.com
staging.nodeapi.cvnt.net
helpdesk.ie-launch.com
cewiki.cvnt.net
confluence.cvnt.net
support.thebestclaims.com
it.oodc.com.ph
bulwark.cvnt.net
preview.docs.cvnt.net
it.oodc.com.ph
feedapi.cvnt.net
secure.cvnt.net
coveyes.com
staging.arbiter.cvnt.net
coveyes.com
api.cvnt.net
eyesonapi.cvnt.net
coveyes.com
alpha.deter.cvnt.net
testrail.cvnt.net
eyesonapi.cvnt.net
zoho.cvnt.net
it.oodc.com.ph
secure.cvnt.net
jira.cvnt.net
nodeapi.cvnt.net
support.biz301.com
staging.billing.cvnt.net
test.jira.cvnt.net
staging.webadmin.cvnt.net
soporte.cjgconsultores.com
sandbox-bulwark.cvnt.net
confluence.cvnt.net
soporte.cjgconsultores.com
secure.cvnt.net
asistencia.soporteparati.com
confluence.cvnt.net
secure.cvnt.net
api.cvnt.net
preview.feedapi.cvnt.net
coveyes.com
coveyes.com
push.cvnt.net
support.cosmicktechnologies.com
zoho.cvnt.net
it.oodc.com.ph
coveyes.com
secure.cvnt.net
ssl.ces.cvnt.net
helpdesk.al-mozon.com
webadmin.cvnt.net
staging.bulwark.cvnt.net
bulwark.cvnt.net
staging.docs.cvnt.net
sandbox-bulwark.cvnt.net
it.oodc.com.ph
coveyes.com
sandbox-icee.cvnt.net
api.cvnt.net
api.cvnt.net
support.thebestclaims.com
icee.cvnt.net
coveyes.com
api.cvnt.net
it.oodc.com.ph
secure.cvnt.net
api.cvnt.net
coveyes.com
staging.nodeapi.cvnt.net
helpdesk.ie-launch.com
icee.cvnt.net
eyesonapi.cvnt.net
it.oodc.com.ph
it.oodc.com.ph
staging.icee.cvnt.net
staging.webadmin.cvnt.net
coveyes.com
asistencia.soporteparati.com
coveyes.com
ssl.ces.cvnt.net
it.oodc.com.ph
api.cvnt.net
secure.cvnt.net
support.cosmicktechnologies.com
webadmin.cvnt.net
ssl.ces.cvnt.net
api.cvnt.net

Certificate

The complete raw certificate details for secure.cvnt.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucy6Y3H3MPUrbaMDzObP
1pnPnD7A5+hA6AWu/cJHaM4XU49wFEPNiTsEmZyV74XJ7GlsjYprdVwto4zlKP8Z
TZGJ56xgMxW2VrcS4kH55w1lN2VBtqkN5s5J7AKy665Y5RTxFqMewPtvdfk2DEIQ
h9qaUpf8grDgn0sdzRIz9wzxxmROAXi4wh6Q4NSEXsqNY/l9udgomV2mwspBygb0
tlymDsh6ZIC/8tzPKHUjUGg3RKn5j1lPcRInzk+477zO8jHCBEib/Wd5Ysbgos1u
9W0da3aMQTraZuyGnxlmhYtx0iat6iB5mk+H8EMWiVZ5apYG71nXTd+d+Z8/aSLZ
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-01-10 23:04:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-14 08:13:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '43086C'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Owosso'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covenant Eyes, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tech'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.cvnt.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23455041597576987217152893608134763636280873601662328691042038208036847352675728697211544292409228990535707512043466730637605468323268232427158497276814521420750925958064079258019910936081987358486925678974826117618495497402151017981204805379793276721657260067055644749839346154017027797370662207560446147960814423509421567324345010152575851670111457090699878753395735097525488360474371108882632422761581162439421064062091174743280572324826375427552796034668971932982542473770160401655393764252413402916727465287337249991100184292072713561922336374257344313936904128342193553900084950745469311143779850353178220616167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cvnt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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