*.sercaeone.com

- Clever Global S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:6e:f9:8d:9d:9d:a4:71:4b:23:90:a7:33:f5:d2:bb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Clever Global S.A.

Organization: Clever Global S.A.
Organization unit: IT
Locality: Tomares
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:6e:f9:8d:9d:9d:a4:71:4b:23:90:a7:33:f5:d2:bb
Serial Number (int): 11210038160660106253206248379773211323
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1b:0a:38:56:49:88:3e:1b:bb:c7:ee:a4:a9:6c:23:1c:cf:06:09:44
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a5:ea:67:e5:f1:4c:fd:78:39:36:77:b6:e8:de:d7:98:ba:0c:a9:a3
Fingerprint (sha256): 11:9f:cc:1b:aa:f9:11:1e:3e:dd:57:79:37:4a:a5:e1:36:3b:01:a6:ef:30:27:28:0e:55:fd:8f:a6:38:e2:02

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.sercaeone.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sercaeone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sercaeone.com
sercaeone.com

Other certificates including the domain name sercaeone.com

(limited to 100 certificates)
subscriptions.cs.zohohost.eu
support.softwebdevelopment.ltd.uk
subscriptions.primed.co.uk
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.akzenta.ch
support.vpurple.com
subscriptions.cs.zohohost.eu
*.sercaeone.com
subscriptions.cs.zohohost.eu
helpdesk.sercaeone.com
subscriptions.tharwah.net
support.akzenta.ch
subscriptions.nextplus.io
support.akzenta.ch
support.setupservices.tech
billing.financialserenity.co
billing.arkan.international
rtisupport.naturalpower.com
subscriptions.cs.zohohost.eu
billing.arkan.international
subscriptions.sqin.mx
subscriptions.tharwah.net
plans.omegabikes.com
support.akzenta.ch
support.akzenta.ch
faq.liverpoolfc.com
csglobalitsupport.contentserv.com
support.bruschini.it
support.reflektis.nl
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.livewellearnwell.org
billing.financialserenity.co
helpdesk.sercaeone.com
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.riaki.com
subscriptions.cs.zohohost.eu
helpdesk.sercaeone.com
subscriptions.sqin.mx
help.mysterydining.net
*.sercaeone.com
support.sqb.cloud
support.akzenta.ch
billing.zeroerror.info
*.sercaeone.com
billing.greymatterlearning.co.uk
support.akzenta.ch
support.sweet-move.com
subscriptions.cs.zohohost.eu
support.smartservices.farm
subscriptions.cs.zohohost.eu
helpdesk.sercaeone.com
helpdesk.sercaeone.com
subscriptions.cs.zohohost.eu
billing.zeroerror.info
subscriptions.cs.zohohost.eu
subscriptions.firstcoreenterprise.com
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.independentsi.co.uk
mijn.onlinevanstart.nl
billing.premierforms.net
faq.lfcstage.com
subscriptions.cs.zohohost.eu
subscriptions.tharwah.net
rtisupport.naturalpower.com
support.akzenta.ch
support.akzenta.ch
support.akzenta.ch
abonnement.strpdv.com
*.sercaeone.com
support.akzenta.ch
soporte.bemovil.es
subscriptions.sqin.mx
control.3mn2.com
subscriptions.sqin.mx
subscriptions.cs.zohohost.eu
account.adshot.io
subscriptions.cs.zohohost.eu
subscriptions.sqin.mx
subscriptions.sqin.mx
subscriptions.cs.zohohost.eu
subscriptions.nextplus.io
help.pingproxies.com
subscriptions.firstcoreenterprise.com
subscriptions.sqin.mx
subscription.maxintime.de
subscriptions.cs.zohohost.eu
abo.dasgoetheanum.com
subscriptions.cs.zohohost.eu
support.finexaconseil.com
subscriptions.nextplus.io
subscriptions.cs.zohohost.eu
pagos.tecnetone.com
subscriptions.ganydar.org
pagos.tecnetone.com
subscriptions.nextplus.io
subscriptions.cs.zohohost.eu

Certificate

The complete raw certificate details for *.sercaeone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uhfGyGYVPpvtsNqw7je
NEpG076i1aeXk28hwOm3adeLmPlloWu+x0Cv7QdykVta2Nm/5vnTZ0RmJgF/rXrJ
7bIaCHhT2JtZhTb/M+mCDEk1AnpLBmOwlzpz28hOi9eizaCOw/IhyIiFDveQZUcZ
y4GJMcdcQMV3ImhTp51fmZuwc8bmYG1jdCHMdJr3GRX/dZDELe4U90VG3cOVjhoy
9vx3Ms+2CLUlIt9fvKXGxkTnwgVUNAE0fyQP+Svqvj9IB/PEiUACbdsAX4NcAmXm
OM2CEkFMt4o6IzhABEgLBZjsmGI7fO+SLu82YtzFyEaTc78JDaXY/4xLwGaqEKVU
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11210038160660106253206248379773211323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tomares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clever Global S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sercaeone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27129583923906351104720792157472966649742000698846973254095762602294140261488564000117605706859691582005132319707435892264364901015645478300914164797861315204032170553180983048384710804155546654354425115030109911727677323424322132982150116283594516597467773347682358219507125556948667053592064781934885996279537152936583549866350805347770596907317082993862483779916712298806205959090426802631491833397717840304948636443457072075138570321943800278658524729866332316155747166137886591613132548310605242116113980615120473339369399326248041902490354852343499961262225463439733533051300085773826993481540628748879744291851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b0a385649883e1bbbc7eea4a96c231ccf060944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sercaeone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sercaeone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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