*.rediker.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 2a:ac:06:f5:92:6f:68:0d:e7:9a:be:41:92:72:09:b7 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rediker.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:ac:06:f5:92:6f:68:0d:e7:9a:be:41:92:72:09:b7
Serial Number (int): 56720792033311388501356751833726585271
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 2e:4e:2d:29:54:37:c2:ae:7a:19:13:4a:63:4b:f9:87:25:b4:25:dc
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 41:8f:15:1a:fc:a6:13:4f:55:e1:5c:71:37:c6:d0:e2:31:7a:8a:db
Fingerprint (sha256): 0f:d3:13:f2:21:a2:7a:8c:7c:f0:5e:92:a7:4c:55:c0:97:53:0c:b5:f0:31:61:0d:db:de:c0:9d:ff:9c:d5:67

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.rediker.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rediker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rediker.com
rediker.com

Other certificates including the domain name rediker.com

(limited to 100 certificates)
ez.fukuoka.status.ricoh.com
docs.rediker.com
ez.fukuoka.status.ricoh.com
docs.rediker.com
rshost2.rediker.com
ez.fukuoka.status.ricoh.com
olftest.rediker.com
fdus-49.freshdesk.com
*.rediker.com
support.rediker.com
cloud2.rediker.com
sa364gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
fdus-49.freshdesk.com
ez.fukuoka.status.ricoh.com
support.rediker.com
ez.fukuoka.status.ricoh.com
olftest.rediker.com
ez.fukuoka.status.ricoh.com
ez.fukuoka.status.ricoh.com
support.rediker.com
sa364gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
ez.fukuoka.status.ricoh.com
support.rediker.com
sa402gl.wpc.edgecastcdn.net
ez.fukuoka.status.ricoh.com
redikerw2008.rediker.com
support.rediker.com
ez.fukuoka.status.ricoh.com
support.rediker.com
sa402gl.wpc.edgecastcdn.net
sa364gl.wpc.edgecastcdn.net
rshost2.rediker.com
dcsif.rediker.com
ez.fukuoka.status.ricoh.com
support.rediker.com
cloud1.rediker.com
support.rediker.com
sa402gl.wpc.edgecastcdn.net
status.rediker.com
sa402gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
teacherevaluator.rediker.com
support.rediker.com
hmcloud.rediker.com
ez.fukuoka.status.ricoh.com
support.rediker.com
support.rediker.com
sa402gl.wpc.edgecastcdn.net
status.rediker.com
support.rediker.com
sa364gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
appro.rediker.com
appro.rediker.com
status.rediker.com
sisstaging.rediker.com
sa402gl.wpc.edgecastcdn.net
sa364gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
status.rediker.com
sa364gl.wpc.edgecastcdn.net
status.rediker.com
www.rediker.com
sa402gl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
sa364gl.wpc.edgecastcdn.net
docs.rediker.com
status.rediker.com
status.rediker.com
sa402gl.wpc.edgecastcdn.net
sa364gl.wpc.edgecastcdn.net
apforms.rediker.com
appro.rediker.com
hmcloud.rediker.com
sa402gl.wpc.edgecastcdn.net
support.rediker.com
redikerapt2.rediker.com
docs.rediker.com
ez.fukuoka.status.ricoh.com
support.rediker.com
support.rediker.com
sa364gl.wpc.edgecastcdn.net
docs.rediker.com
support.rediker.com
status.rediker.com
sa364gl.wpc.edgecastcdn.net
*.rediker.com
docs.rediker.com
support.rediker.com
support.rediker.com
sa402gl.wpc.edgecastcdn.net
help.pbskids.org
sa402gl.wpc.edgecastcdn.net
status.rediker.com
docs.rediker.com
sa402gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for *.rediker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHTugFXeb490mLTQuUqM
JFNUIWlYWshXQHGBn/jYCTKMLjbrKOGpq1lHsBF0txgWGsY5Jhl8wYFsXeTGpy5m
zFDHut3n6B88XD4SqU20szB1jDlLVo6n73iDvhMRxQQQZW4X3YBuyJgy2s7fx+1P
HINwFg0wg+OirlXCh8Fbv0Qmj1JX7zLxofQa6/tgqn2/MS7b+DwQmmu0582aBlwe
eD3ZEc8JZoheIM/cdhvRWHmdVlDRXjY6W6pyO1Z1b5UZ7TZQj5NWQf0CATEcU+8a
GteHsXGRoYIdVKGoiKS8T4tBhWfccc7D4nPkDyVMgeb7e4uCIPy7UF+FuxySyzCQ
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56720792033311388501356751833726585271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rediker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21770649597738298956670534309140037616656928127794072856961585947373763732360811246949982779936841280151828089882671996079879969964433480888871722194213122806674741790962396431368454000486978897293432059506029583431856313445205122263364280226932987128803421810501454398971028403931586806648686897877230596697180094082693653615713651524708105572018758630497287628695583607461702646124455931696902150366340402567196598675635561297057336767038698298057111391518741370392762748594563952053290992751541595793309899466650275443879778853277433941797303475245971500533911264238857762857996297958710660225493219240611771617511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e4e2d295437c2ae7a19134a634bf98725b425dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rediker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rediker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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