covenanthousetorontoevents.ca

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 91:29:f6:39:70:f5:1c:df:c5:99:50:f3:4a:8d:73:85 was issued on by Sectigo Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=covenanthousetorontoevents.ca

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 91:29:f6:39:70:f5:1c:df:c5:99:50:f3:4a:8d:73:85
Serial Number (int): 192955937583739135407733489281010594693
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 97:eb:30:d4:c8:eb:8f:26:4f:ff:69:46:1c:ff:5c:0a:30:ab:6a:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a3:14:e3:d3:08:b9:3e:ec:ff:58:bf:bf:3b:d1:6a:11:6b:21:b7:bf
Fingerprint (sha256): 16:87:3a:65:e8:fb:d1:dc:6b:28:bf:88:c2:28:b5:4b:3b:46:2a:da:74:c2:a7:5f:80:e8:6d:f1:8c:74:0a:4c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate covenanthousetorontoevents.ca

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covenanthousetorontoevents.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

covenanthousetorontoevents.ca
advanceconcordia.ca
crowdfunding.mcgill.ca
donate.ccla.org
donate.humanitariancoalition.ca
donate.oakvillehospitalfoundation.com
donate.ottawafoodbank.ca
donateoakvillehospital.com
fundraisefornygh.ca
give.orbis.org
m.supportthepmcf.ca
qa.raisin.events
raisehope.ca
secured.hope-international.com
supportmackenziehealth.ca
supportthepmcf.ca

Other certificates including the domain name covenanthousetorontoevents.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for covenanthousetorontoevents.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppmIivv63keVPporf66
HnHB67LKLLaDt5EJrp8OC3OiaFzpouHnqjYLpPLLmhfA0uEUGEc8oL7ACWxKw8Of
Hh8doNMgdKawZxFpiNrqaAunlAqDNDeA3cMjFwycIYxWHxQSJ40CT69e1rUkVTXi
ma377WF1f62jR6aQotWg06Qw9xpXpDDN42jvnzJcVKIpH4XbHvvBE8EfC57sn8Ao
iPs2cfxmPYahvALKIalzKJ2t/PaYmq4917RPLXwOcmABBvh4Ko4unlLiWyPUhpi3
75WbJ63a3e9R8LG35/pdVXj1iMJQqMqW9jJRj6OaZSj27UM0EeSGoA0p5c0KK7zc
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192955937583739135407733489281010594693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covenanthousetorontoevents.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051508468128501760205140336111892565828501383844638708892380235511002640525186778606097892053669106199893697436100743289862828574048665375000074969118577241303761527967972016276656550001222424608906564696232373885413873555504261582433494873310111420862423101608857443570931913436903032267616118020406102988003533610215607220036023487345024265518473660632639321605593260583669593977309537455413777833997640467059888746576833693377883798540259995236347203500091363374977577748394252791934383077901459066856618076858893678165098086450433628200945796429887421434076341618241884140343408326682087166630189376500899044473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97eb30d4c8eb8f264fff69461cff5c0a30ab6a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (391 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceconcordia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.mcgill.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ccla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanitariancoalition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oakvillehospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ottawafoodbank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateoakvillehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraisefornygh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.raisin.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisehope.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.hope-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmackenziehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportthepmcf.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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