winhost.teksavvy.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:df:9b:bf:e0:a3:11:1d:f9:68:71:b9:36:f1:42:2a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=winhost.teksavvy.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:df:9b:bf:e0:a3:11:1d:f9:68:71:b9:36:f1:42:2a
Serial Number (int): 14453321132891809465340569699763700266
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:84:7b:b3:60:3a:a6:13:ff:18:c2:f9:9c:1b:d0:22:3e:ae:bc:26
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): e0:95:66:42:41:0f:29:e7:62:60:a0:da:56:53:7e:8f:72:fe:d3:c1
Fingerprint (sha256): 15:3e:e7:e4:fc:98:33:5a:73:25:a9:8e:fe:de:78:12:ce:0e:90:22:f5:e5:4f:bd:98:54:dd:b6:ad:12:01:eb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate winhost.teksavvy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winhost.teksavvy.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winhost.teksavvy.com

Other certificates including the domain name teksavvy.com

(limited to 100 certificates)
secure0011.hubspot.com
*.business.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
www.teksavvy.com
directory.engagemojo.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
teksavvy.staging.teksavvy.com
blogs.teksavvy.com
webhost6.teksavvy.com
secure0011.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
promos.teksavvy.com
www.teksavvy.com
*.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
24x7.ifxnetworks.com
*.teksavvy.com
www.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
webhost1.teksavvy.com
secure.teksavvy.com
secure0029.hubspot.com
support.callocean.com
*.teksavvy.com
policy.teksavvy.com
assist.emergencysupport.us
secure0029.hubspot.com
cklass.teksavvy.com
secure0029.hubspot.com
directory.yaxxa.co.za
secure0029.hubspot.com
webhost1.teksavvy.com
winhost.teksavvy.com
business.teksavvy.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
monitoring.resolu.com.au
secure0036.hubspot.com
monitor.business.teksavvy.com
help.mitipi.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
*.teksavvy.com
support.cbont.com
*.teksavvy.com
secure0029.hubspot.com
24x7.ifxnetworks.com
*.teksavvy.com
business.teksavvy.com
teksavvy.staging.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0036.hubspot.com
webhost4.teksavvy.com
*.teksavvy.com
fthefineprint.teksavvy.com
fibre.teksavvy.com
*.teksavvy.com
webhost5.teksavvy.com
webhost1.teksavvy.com
*.teksavvy.com
*.teksavvy.com
blogs.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
webhost7.teksavvy.com
secure0036.hubspot.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
policy.teksavvy.com
webhost7.teksavvy.com
www.teksavvy.com
secure0011.hubspot.com

Certificate

The complete raw certificate details for winhost.teksavvy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14453321132891809465340569699763700266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winhost.teksavvy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686961048492044196248019417247631118056599558992672649094409308179918466498983446779906896800399809938527190618831115778703579322969449930073493072513961999175257471176604913811140061547116968631134992911161835986213150762878920275917781787154286815575764168965277449431337597547541996598271987974955282973066010453976988938499948630998354495987306041972152551638124690212933709674038597235383810726182891604011376659910198968799517881325003421308712010613210861433865992102375100765160857060668335211478800842334195570860368744753237033001337365398873535655438653343637423942374428214377743468460735336233121135092305718052304821511665839262340231361199795041151136454809867165650057193893632537879093475712013985104850044159937599193241125553341549288903961456427592856254282388150678515578376143118593489459481952643076897132639225713272473897491667436722726051328728843901933670096322845355399548049573688958467013158586889246227389112474521738179839825913327803956643915278019703569831160181766833314507090120417197462543036185149463424062944279350960312647965115418358231606964407267052616270646119689545181775756735934460533784306103728090613755310341650861779784615649442337533524102534924019689251829972356733556986769404389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45847bb3603aa613ff18c2f99c1bd0223eaebc26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winhost.teksavvy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018aad3323cf0000040300463044022051f0e5827ac8527ffda55531279cf490971cae99eae3cd3a157cb68b403cd9ce02202b3de3f607da1180f082a0f57ace028fb9115d70591a62be49cd5ffe50561d6c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018aad3324180000040300473045022100fd8cb970e3fcc59463d2f3a5609d8e42886d7d8414831cedba48cfa4c341ac4002203f7c7a911d0dd41b3a7e0ca651ccd00dae79fc274cf78e009a992ef964864c29007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018aad3323e1000004030046304402203597e9790f8469d72e950a9ef60535dba3bd40d48d6e11a311368961a8cb06d602204c24f5b19f07cc66eee973da55e56d60bbee1c701287c1624368e1eff717bad9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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