www.afdaniel.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0b:a6:fd:fc:33:13:96:27:45:79:28:83:c2:bb:5c:06 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.afdaniel.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a6:fd:fc:33:13:96:27:45:79:28:83:c2:bb:5c:06
Serial Number (int): 15488580663084947626371075069294894086
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:99:8f:a8:20:c8:37:7a:44:2a:f8:b1:de:be:a6:f1:42:56:3b:af
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): c6:5c:a4:af:fc:65:d8:63:51:c7:36:f2:6e:dc:e7:67:c7:e0:74:29
Fingerprint (sha256): 1e:0b:95:4c:5a:be:b2:51:fe:95:46:b0:77:50:d7:e0:63:4e:24:3c:8d:89:8d:5d:12:6f:6e:5b:7b:12:d9:c2

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate www.afdaniel.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afdaniel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.afdaniel.com
afdaniel.com

Other certificates including the domain name afdaniel.com

(limited to 100 certificates)
sni75115.cloudflaressl.com
status.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
ssl376212.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
status.afdaniel.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
status.afdaniel.com
ssl376212.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
support.afdaniel.com
support.afdaniel.com
ssl376212.cloudflaressl.com
afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
support.afdaniel.com
dashboard.afdaniel.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
www.afdaniel.com
support.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
support.afdaniel.com
ssl376213.cloudflaressl.com
support.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
support.afdaniel.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
sni75115.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
ssl376212.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
status.afdaniel.com
dashboard.afdaniel.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
sni.cloudflaressl.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
ssl376212.cloudflaressl.com
status.afdaniel.com
ssl376212.cloudflaressl.com
www.afdaniel.com
afdaniel.com
ssl376213.cloudflaressl.com
status.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
www.afdaniel.com
ssl376212.cloudflaressl.com
ssl376211.cloudflaressl.com
support.afdaniel.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
ssl376212.cloudflaressl.com
ssl376212.cloudflaressl.com

Certificate

The complete raw certificate details for www.afdaniel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMMBh7BbWcj/CYBvIveX
XMdqycOg/rSuNbH0PCTTuHc00/9e5gX3l/iQV7NPKpoMKr2Wo1dJBrIO4mIsCT1A
ze/I5JbW9pW+S0iXMg/yQ+Gfvn1rFwdYUDK7riuXB88FMEx9CKWsqXnGuWWXeYbk
KsoA/EIlXN6wCrdM+bqsxEU20zzfazmeCbdrTqfJ8b3Op9zJBZ1Vlas9pp9h35Xp
36U4OGPjkAkWIFH977YnNLU/KXYU9PU/GboaXuHPfIKdTrsVZVXQq64qJholtxLg
VHHUfPA6d03IRP331dS6dMpTA5RAN9feTees7Giqrk2JJg+klt/+uOH+Sew1ilvQ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15488580663084947626371075069294894086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afdaniel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24838868804428086747151319270934249905896152133943003500815191132821482672862948382584455478552368748271363870643333693048674114205385062290388781600746764819202402739889972352428110345602196279901485621205401956042579997617025908485029379494443564953273690605213943355824244921818080348519581272667730692166811266559091921633083628901928956619363465024720299091696107421835055042554105850652171754253433711841970332153379731497772863882208176589591645778049885635888225916164770825449680316605054029949661882537448019008647910003778624835438926108151139781696154801160794895077760754638254562312039959977377010536601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96998fa820c8377a442af8b1debea6f142563baf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afdaniel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdaniel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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