*.speakingathome.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:65:12:bf:d7:b8:f9:6d:26:c4:f6:ac:67:55:98:46 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.speakingathome.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:12:bf:d7:b8:f9:6d:26:c4:f6:ac:67:55:98:46
Serial Number (int): 5841714248566484381794168796968491078
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 93:31:32:b0:06:13:70:a8:57:22:e5:b0:0b:c7:05:02:2e:d4:ca:b9
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 43:db:92:44:7d:3f:6a:fe:7e:50:bc:fc:50:7c:de:fc:df:6e:94:0c
Fingerprint (sha256): 15:9a:80:6e:a1:76:81:68:b3:20:9a:e9:9e:42:0d:1f:e7:3a:bd:c0:c2:8a:22:45:13:1e:3e:71:d9:d9:f7:37

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.speakingathome.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.speakingathome.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.speakingathome.com
speakingathome.com

Other certificates including the domain name speakingathome.com

(limited to 100 certificates)
vashezabey.ru
aprendiendo.app
careerkey.jobsforlife.org
www.cronun.co
www.speakingathome.com
www.estacaometeorologica.com
www.utupay.africa
*.speakingathome.com
www.es.speakingathome.com
tor.community
www.splidoo.com
www.hotelsaborefe.com.br
davidspray.me
www.lovoma.de
automationagents.net
www.talmoe.com
test.storydsoftware.app
vtpatient.app
gayahonda.in
awscloudpractitionerexamprep.com
app.singomedia.co.za
www.xdomu.com
www.githunter.co
*.speakingathome.com
bimavima.com
ja.regularly.appo.biz
mooque.co
pilot.ageroroadsideconnect.com
www.cronun.co
*.speakingathome.com
second-chance.app
www.gzz.me
l.smartplug.kr
www.jamesmfriedman.com
www.poppeg.com
luxdesires.com.au
*.speakingathome.com
demo.kaito.app
amaansaeed.work
www.service-tech-hub.com
www.doodleseraserman.com
www.obs-hermes.com
www.tr.speakingathome.com
www.codeassistapp.com
*.speakingathome.com
www.stellarjaysoftware.com
transy.live
www.artordot.com
*.speakingathome.com
www.critterhobbyist.com
es.speakingathome.com
tokensale.elysio.app
www.uneer.sa
www.critterhobbyist.com
snplay.com.br
zero.ai
www.nroad.ai
www.fixitnow.in
cahub.org
clicktechnologies.media
test.manager.woonig.app
app.melhoresdasuinocultura.com.br
dbateknoloji.com
a.hisab.co
ajolo.dev
www.fintlabs.no
www.weinlagerlaupen.ch
www.bicciexpress.cl
halal-academy.com
cybercore.space
maemae.kr
www.projectwink.info
www.geraldoramos.com
*.speakingathome.com
thebasket.club
*.speakingathome.com
www.theohcode.com
piedpiper.stg.unthread.io
lipitino.samui.rocks
www.5for5.xyz
pump-games.com
jjhop.com
*.speakingathome.com
fire.allbrightinformation.com
jlrspace.com
bighavesolution.com
www.geraldoramos.com
next.dev.evertransit.com
www.pianolessonshull.com
persica.app
loja.flowpodcast.com
boilingmetal.jp
celltech.vn
www.spectra.mhi.com
speakingathome.com
*.speakingathome.com
jabwemake.com
fabric.rcloud.dev
mail.speakingathome.com
danielaundbenjamin.de

Certificate

The complete raw certificate details for *.speakingathome.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPsIJ0liO9wY2DtU0EXS
Z5XmlRUmrkdXyRXv7EkDRXxuTQHwcxOJOjkLoKf6kM4SfKx4vOlKiNn55ZLz15Wb
35935wpPPsUNZANgw2st/IwGxedzH7GA1JnFvfh+MfciyuD9Zl/s5WxqRLTLVbDB
ny0MOuIm5sPk6NJYwEgVDt6V8EUXjcZ6h4iMJruYazIu8OQPx1dRXr7rqHExA+pU
5VsavFg8sAoBplwpVPiDBybqitVTB+6i3XOYbk5Z6jFUesZq7IPpR/1kr4Gs+KO2
ExzwlZyEc/t18IArSf4tQQguS86brkeD262CCyw1xHulvOuk1SnQyM6OQ0ExVQk3
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5841714248566484381794168796968491078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.speakingathome.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24866496191977105759471506115742193238470197315510598788486783872874695816881000256034653522871685726487303962024166071534485655282177919745802673968688725461756907283968463774887504789751414986493820540070164634259532457243908360592661483870408806055377208474182737762751122583012977270004384781058547220042472364024233920769523949264159424610498883042183514292191643782041714562972125320065057385043749150435972590289070575555359150521363551592459694156429104880619961675889264774818596024190193302508465134007648350727373454388926557890939710282968954822791916574989012013819656881808098911908929813439835693201231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							933132b0061370a85722e5b00bc705022ed4cab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speakingathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakingathome.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001609e608dd30000040300473045022002e42c15c5e1aa48cfc06e642f3025494693ef7e68f2f306616794447b37b46b0221008d5890b378fcd26dcfeba7a6a8e03d57bf69d8166137deeaf833f1106ec4d1590076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001609e608e7d0000040300473045022077e4a5e6936ad2336691f39e19ca67f9f58b37e5281ed6424ea4a7cba779c319022100c14294a88a398e4790d2b768b2637ff8a066dcb6f46bde9352afa8e43ee0b628
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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