*.rgn.io

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 50:c0:d1:b1:c6:7e:99:88:6a:28:d0:d2 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rgn.io,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:c0:d1:b1:c6:7e:99:88:6a:28:d0:d2
Serial Number (int): 24991904797045273379717304530
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 10:a4:5d:93:af:27:af:75:83:78:79:3e:cd:19:4c:3d:35:ab:cc:48
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c5:cb:f1:64:1e:1c:6d:a1:6f:02:e0:c3:b2:01:de:b7:a1:33:52:75
Fingerprint (sha256): 1e:ba:d6:37:e4:e6:f6:47:b4:8a:42:55:89:12:d1:0a:3c:66:ee:dd:4b:29:ef:eb:36:40:e5:5d:44:6e:08:ce

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.rgn.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rgn.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rgn.io
rgn.io

Other certificates including the domain name rgn.io

(limited to 100 certificates)
www.modera.app
www.agripad.jp
www.meiscalculator.com
jual-bu.com
dev.nowplaying.mdstrm.com
projetos.terasing.com.br
www.zenitsecurity.it
www.redmotoshn.com
andersonbrownesolicitors.co.uk
whitecalendar.com
eventdo.info
sysadmin-staging.staffshift.com
nicoto.es
chintpatel.com
qa.mansfield.rgn.io
infusionsoft.app
numeral.center
banein.com
www.thoughtsandprayers.report
plsreturn.me
www.fontspark.app
trageberatung-lisareif.de
colestuc.rgn.io
qa-bizworks.gov.taxscribe.app
www.vanessawiedeman.dev
staging-qrms-v2.qburst.in
www-dev.cheaseed.com
fergmovinweight.com
*.rgn.io
asercorredores.com
colestuc.rgn.io
asercorredores.com
farklefootball.com
wa-helper.wayha.la
byttapet-prod.web.innotactsoftware.com
www.subprotect.com
www.sm-all.app
2rodas.app
bank.novapay.co.zw
care.brucira.com
cms-qa.skykit.com
www.medizealpharma.com
beta-unicorn.bunch.party
app.pefoma.com
automation-admin.pagerinc.com
vidds.ga
sni59808.cloudflaressl.com
ridpodelivery.com
www.quack.games
echopc.es
penguin.billing.ishealth.app
www.compliant-routing.com
*.rgn.io
www.sunnovishealthtech.com
4andgo.com
dev-admin.cnect.jobs
www.papersboxgt.com
themoken.com
revise.ac
ks.myna.lk
nicoto.es
e.aktuelexpress.com
app.scontomio.com
app2.ricetteperbimby.it
www.despliegayvuela.cl
app.motes.dk
www.dashfy.ca
www.webcontra.com
arab.ahmedroach.com
bantumart.com
growthiq.auctusiq.com
books.spearmintlabs.org
soymichel.dev
app.motes.dk
bdfd-guide.tk
corpoclash.com
codenow.eu
hamptonroads.rpnva.org
www.cryptocriminals.io
sni59808.cloudflaressl.com
dashboard-dev.arrive.ng
servigruas.rgn.io
contpaqiprofit.com
www.domiciliosplazas.ipes.gov.co
dev.cms.audiomob.io
eventdo.info
www.iblline.com.br
pcsdirectpay.com
www.vidyanagar.in
www.aureagustavo.com
feeds.eventfull-us.com
sni59808.cloudflaressl.com
zeview.co
develop.co-instructed.com
www.firstbreak.in
jamilben.com
basicapp.rgn.io
nutricionyforrajes.com
sistas.online
fozzy.com.br

Certificate

The complete raw certificate details for *.rgn.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ2DD152IwV2PhXiBv+L
FGiieNsxtu52f/XZ6v7NFDO/lUj3MZifXv8MCxS8s+FCm2Ia+RWs2BXC6OqFiT8m
PMTtJKZUKiOpfK8Fsk7PQMqIKaa2DP+/IKg92x07ddL3pD+CHcni5ANqZluymW0s
0xlfKXTY8xQwnZQlZkes5aLlAA6lhN4/09KHlrHm3xqVx+pqQMu0Pp/0Ztg95VMJ
TKMVh1J+YcspYZDDjZiB1VCBsBt+SReCeFN5FLeaRwUt70t4SZeDZdiSDVa+ncu+
k5kVNpkBhn5+XGJeX3LnozaXFm0VAvZw87cVafJdYtCrxaIH41hrVpd7jzpgY+5a
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24991904797045273379717304530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 15:15:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 15:15:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rgn.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22350842971479087115293389391087725844731694420317472685875014356085190161078240832627485224535796427271093876383063813729497454065534714477313804829752824753861539364498295183615809855308532851177346300327207298839950311693762825234520903737905812859347600548968375710508379352416882223901697081337111332115672432067861917192544111979832026054908577364768694737114197902311557570653734895719065563720914269427312723168706740276700330441940139976179626649227383137960247403837864927141491130798165222879220382304356998557214933349878276366344425242793989939947272636293798110037222056699760964855702932180325018524347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgn.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10a45d93af27af758378793ecd194c3d35abcc48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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