www.invma.co.uk

- HubSpot, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 06:dd:11:b7:e6:62:16:8b:cd:6a:b1:de:1e:dd:23:89 was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HubSpot, Inc.

Organization: HubSpot, Inc.
State / Province: MA
Locality: Cambridge
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:dd:11:b7:e6:62:16:8b:cd:6a:b1:de:1e:dd:23:89
Serial Number (int): 9123224951462827792292556308762928009
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:80:12:99:ee:64:7f:21:f0:4e:ad:70:a5:15:b8:b3:1c:93:be:fb
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): 44:5f:0c:af:66:a4:dc:79:bc:96:af:f2:1e:e9:0f:bf:5d:d4:38:90
Fingerprint (sha256): 16:05:2b:95:a2:67:58:ed:3d:fe:b5:93:aa:98:bc:68:12:6e:0c:33:8a:33:a2:0c:0e:e2:f7:e1:cb:9a:b2:23

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate www.invma.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.invma.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.invma.co.uk

Other certificates including the domain name invma.co.uk

(limited to 100 certificates)
secure0128.hubspot.com
support.floorspan.co.uk
www.invma.co.uk
secure0128.hubspot.com
aceaquatecsupport.invma.co.uk
dawnmeats.coliance.co
secure0128.hubspot.com
support.scaramanga.agency
supporto.amministratoridisistema.it
secure0128.hubspot.com
secure0128.hubspot.com
www.invma.co.uk
support.floorspan.co.uk
invma.co.uk
secure0128.hubspot.com
dawnmeats.coliance.co
helpdesk.asioso.com
secure0128.hubspot.com
secure0128.hubspot.com
secure0128.hubspot.com
secure0128.hubspot.com
helpdesk.asioso.com
secure0128.hubspot.com
secure0128.hubspot.com
pls.proofload.de
secure0128.hubspot.com
helpdesk.asioso.com
support.floorspan.co.uk
tls.automattic.com
support.floorspan.co.uk
portal.visionsoft.com.cy
secure0128.hubspot.com
helpdesk.asioso.com
thesource.support.ignitehospitality.com
secure0128.hubspot.com
support.resell.biz
www.assetminder.invma.co.uk
www.invma.co.uk
www.assetminder.invma.co.uk
supporto.amministratoridisistema.it
secure0128.hubspot.com
secure0128.hubspot.com
www.assetminder.invma.co.uk
secure0128.hubspot.com
helpdesk.asioso.com
supporto.amministratoridisistema.it
support.floorspan.co.uk
secure0128.hubspot.com
secure0128.hubspot.com
assetminder.invma.co.uk
soporte.secuora.es
secure0128.hubspot.com
secure0128.hubspot.com
secure0128.hubspot.com
tls.automattic.com
assetminder.invma.co.uk
tls.automattic.com
secure0128.hubspot.com
secure0128.hubspot.com
secure0128.hubspot.com
www.invma.co.uk
thesource.support.ignitehospitality.com
assistenza.lrsa.it
pls.proofload.de
support.adomik.com
support.floorspan.co.uk
tls.automattic.com
helpdesk.asioso.com
assetminder.invma.co.uk
secure0128.hubspot.com
invma.co.uk
thesource.support.ignitehospitality.com
assetminder.invma.co.uk
secure0128.hubspot.com
secure0128.hubspot.com
helpdesk.asioso.com
helpdesk.asioso.com
secure0128.hubspot.com
supportzoho.e-cervo.com
secure0128.hubspot.com
pls.proofload.de
helpdesk.evalink.io
support.resell.biz
secure0128.hubspot.com
dawnmeats.coliance.co
www.invma.co.uk
helpdesk.asioso.com
www.assetminder.invma.co.uk
support.resell.biz
thesource.support.ignitehospitality.com
secure0128.hubspot.com
supporto.amministratoridisistema.it
helpdesk.asioso.com
support.vervaeke.com
supportzoho.e-cervo.com
tls.automattic.com
www.assetminder.invma.co.uk
secure0128.hubspot.com
secure0128.hubspot.com
helpdesk.asioso.com

Certificate

The complete raw certificate details for www.invma.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZDMU8z5egZ4NWkKn2p1
13xb7ZCuLa7yFUTY87qphUKJa+eDswn18mYg9QDbDkdGToGlcemEq2Z7AYIu8qKU
4JFK+H6OOsZMzEZIUfzRI/9Q2maJSj45DJN4VFH2WEXZJvGODLTewkvvoX+WgK3C
QQbC5Ljuo5N1p6hltJzte0B7cIUEa8aExC/JAmkfY9cT8boTuZM1VyHQhjRBeXwt
WEWU+VmEKBKXy5qPp/kz992PTa2Y/4x4LUsyzqpk3DOJwu/ouCvu/EXZu8IUH35H
mcwE3BM9M6VLreMf5709eInlNvvY3f83qAVSfj/Gk7CkJRkreoOQ/Vp9BxlWuRW+
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9123224951462827792292556308762928009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.invma.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26455208368706700156458584143802234657481471866789912792783134651429244482336500404756814594584387849597836745274404274019613614444549858889266082983183086858869533984291955607586661998440486488056743848026612682870731477741492754016238468616441491939168529146372993478970154682086100098054225081014510589361133496517255517066696368993354470162040069297660812775595262480465463790009067302016750810302307921404790003708283373312414022088650660343492761218360609192392169350878224579513737940870970477644675132386088189880174152897200763766841456802860784609738005615433211232920717648073963245200500795684034130067103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10801299ee647f21f04ead70a515b8b31c93befb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invma.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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