*.moj.gov.sa

- Ministry of Justice -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:c3:6b:fa:07:78:a7:e1:87:7e:64:1f:6b:ee:48:b4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministry of Justice

Organization: Ministry of Justice
Locality: Riyadh
Country: SA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:c3:6b:fa:07:78:a7:e1:87:7e:64:1f:6b:ee:48:b4
Serial Number (int): 14306967872443928374007856054617917620
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:65:b6:9c:ba:e8:6a:7e:09:19:65:d0:3c:b3:f9:3d:dc:fb:4e:17
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d7:f1:96:d8:5f:a5:94:c4:fa:20:15:de:da:0a:2d:4a:ba:7f:a1:9b
Fingerprint (sha256): 16:51:85:7e:7b:64:b1:7c:86:6d:26:83:83:7a:94:94:17:a4:94:d1:33:ac:4f:fb:22:37:6d:8f:94:9c:03:68

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate *.moj.gov.sa

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.moj.gov.sa

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.moj.gov.sa
moj.gov.sa

Other certificates including the domain name moj.gov.sa

(limited to 100 certificates)
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.blob.azsryd01.moj.gov.sa
*.moj.gov.sa
extranet.moj.gov.sa
*.queue.azsjed01.moj.gov.sa
*.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.sso.appservice.azsjed01.moj.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
cppm.moj.gov.sa
*.adminhosting.azsjed01.moj.gov.sa
*.moj.gov.sa
*.queue.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.adminvault.azsjed01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.azsryd01.moj.gov.sa
*.sso.appservice.azsjed01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.vault.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
eservice.moj.gov.sa
*.moj.gov.sa
cppm.moj.gov.sa
*.appservice.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.adminhosting.azsryd01.moj.gov.sa
*.moj.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.table.azsjed01.moj.gov.sa
*.queue.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.adminhosting.azsryd01.moj.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
www.ji.gov.sa
*.azsjed01.moj.gov.sa
*.moj.gov.sa
*.blob.azsryd01.moj.gov.sa
*.moj.gov.sa
*.moj.gov.sa
www.moj.gov.sa
*.moj.gov.sa
courtsportal.moj.gov.sa
*.moj.gov.sa

Certificate

The complete raw certificate details for *.moj.gov.sa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14306967872443928374007856054617917620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riyadh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministry of Justice'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.moj.gov.sa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705064704234876592647910145459166448194455921927839141000141231318213162763613765463893439720104245508720208131597011193166454344760391906147465612853241413014678046023260417177563493907546607786908409570160776888133560248355300725360777252112990284337242200317001483664551803354335339180011087989109235964273716241868073123912009990787491150686281153955708659771496191407738102941106467033277707052437382706461026318688441304997135995893162976342022628152207910126614321118966855656089674731346817394774640223927041764542752560054260685941746463759428704370640723742749110898599179108579810652300661118077504279692795908114595990936824174030027319929153251674397989752019530767099424523880428279081174371185535542477284989884574267678346907208334555657231559966700327851778614819781950587450653409287623983520933023306389016926484117410349334509986718558866005774959692989673322565862642127342354947240762863642629939656740686563977993309461621517667068246519282111480191527114130446552547587944225659796155372377666460906098592589496161071658038397058353625609973471273296359938263099771822640792282784650180995326348516258121549827206422982894628141022117778506900483812161757234243000866916353107994619964615187361506256079817457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e365b69cbae86a7e091965d03cb3f93ddcfb4e17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moj.gov.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj.gov.sa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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