aptabasiserve.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 0e:aa:92:b4:c0:42:29:8b:c5:4f:6b:ba:e4:6a:b6:95 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aptabasiserve.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:aa:92:b4:c0:42:29:8b:c5:4f:6b:ba:e4:6a:b6:95
Serial Number (int): 19494857959312235814099889977333298837
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:27:5d:5a:6c:0b:e5:ce:b4:c0:c4:c0:e2:9f:ab:d8:7a:a2:25:c0
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 02:df:04:9c:6d:88:ca:ff:4e:a5:05:6e:ac:d3:a2:4f:1c:c1:ab:bf
Fingerprint (sha256): 21:1c:46:18:42:46:35:17:8c:d5:fe:71:d5:b9:a3:da:4e:52:06:60:28:79:b1:5b:33:53:54:6c:38:fd:5e:6c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate aptabasiserve.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aptabasiserve.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aptabasiserve.com
www.aptabasiserve.com

Other certificates including the domain name aptabasiserve.com

(limited to 100 certificates)
1oaksl.com
aptabasiserve.com
trinitycollege.lk
susitk.com
susitk.com
1oaksl.com
adventuredreamssrilanka.com
ginumhub.com
hewaheta.com
aptabasiserve.com
era.lk
yashiholdings.com
aptabasiserve.com
yashiholdings.com
1oaksl.com
aptabas.com
tfbrugby.com
susitk.com
era.lk
tfbrugby.com
aptabasiserve.com
www.newburydigital.aptabasiserve.com
1oaksl.com
adventuredreamssrilanka.com
era.lk
yashiholdings.com
hewaheta.com
www.trinitycollegekandy.aptabasiserve.com
yashiholdings.com
yashiholdings.com
era.lk
1oaksl.com
*.susitk.io
susitk.com
adventuredreamssrilanka.com
juniorgeorge.com
mespl.lk
aptabas.com
susitk.com
totalfitnessbay.com
www.trinitycollegekandy.com
*.websitedemos.lk.aptabasiserve.com
cpcontacts.susitk.com
ginumhub.com
hewaheta.com
aptabasiserve.com
yashiholdings.com
aptabas.com
totalfitnessbay.com
tfbrugby.com
adventuredreamssrilanka.com
trinitycollege.lk
newburydigital.io
ginumhub.com
hewaheta.com
susitk.com
mespl.lk
ginumhub.com
hewaheta.com
1oaksl.com
susitk.io.aptabasiserve.com
ginumhub.aptabasiserve.com
juniorgeorge.com
sappowersolutions.aptabasiserve.com
totalfitnessbay.com
yashiholdings.com
www.trinitycollegekandy.com
ginumhub.com
1oaksl.com
trinitycollege.lk
www.susitk.io.aptabasiserve.com
adventuredreamssrilanka.com
mespl.lk
susitk.com
hewaheta.com
yashiholdings.com
mespl.lk
ginumhub.com

Certificate

The complete raw certificate details for aptabasiserve.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQga3dhDDuxZXjGVJORJ
YnF2coRn7y/QA/2pZGot7FXvlX27tyeLk/757/aby5AVNN4UXRicRyqc0EN+5pJS
4qlUrJrmgEWtCeGwY0fvvd82sggwpth32mEmqU9uX7krozfm72nGhVuVKoWx9Low
c0E7FzE991MuO6KoCT1v3YGcfR4i9jIjJ+KZnOKicAnX5V9pGI0aA2/m6WpSFTmG
aHNllXjGluQGEyQvSco8zagTXk8q/iiGu1irJ7uH8fSQruCGjLWryF31L1WVlPBL
0/V43K7aDRSN458Y7ZgPnp5rwwCwLmhNs42mmc8F+Cv7Uj0e3kByY/xpqNMP8zeS
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19494857959312235814099889977333298837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aptabasiserve.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24872942776925525505883245380802135493513938240931618436230494655925891573897040510569478283661586654299182507919040606187133378983936155405026706341294634140546210964266961222408728986766370311558762350647580315467032936284734233569979687955193096004715472812348186636701122199389296482383801470510237881000347882740485570822786823909119528397276990608067237991923014188804338676161945278916867692856203873792888213897904479870435831382722441206431187827124790329161090177744057418655901049374961457711999503229449120238612224495479895709832551747444450874513143248781309816184584089664066209994457999216150484324891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd275d5a6c0be5ceb4c0c4c0e29fabd87aa225c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aptabasiserve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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