www.emeraldwhoswho.com

Issued by OptimumSSL CA

About this certificate

This digital certificate with serial number 28:df:a0:f3:49:0c:2e:66:7f:2a:04:79:c2:3f:e9:6f was issued on by OptimumSSL CA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=www.emeraldwhoswho.com,OU=Domain Control Validated+OU=OptimumSSL

OptimumSSL CA

Organization: OptimumSSL CA
State / Province: New Jersey
Locality: Jersey City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:df:a0:f3:49:0c:2e:66:7f:2a:04:79:c2:3f:e9:6f
Serial Number (int): 54330266491437108657199264285910362479
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d7:d8:6e:14:2f:19:3b:54:db:2f:a5:45:4d:18:9e:49:de:86:9f:dc
AuthorityKeyId: 8b:0f:35:ab:5f:46:db:cd:40:9d:df:c8:c7:5d:83:5b:48:a3:ab:5d

Fingerprint (sha1): e6:66:4a:3e:68:71:17:9e:28:30:46:91:ef:24:fa:92:7b:bf:97:9d
Fingerprint (sha256): 21:f9:e5:21:48:52:1e:96:57:55:2a:54:15:f7:2b:a4:e3:08:a4:5c:72:d9:d1:75:8c:8b:2a:5d:63:14:74:60

Issuing Certificate URL: http://crt.comodoca.com/OptimumSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/OptimumSSLCA.crl
CRL Distribution Point: http://crl.comodo.net/OptimumSSLCA.crl

Check the revocation status for certificate www.emeraldwhoswho.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.emeraldwhoswho.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.emeraldwhoswho.com
emeraldwhoswho.com

Other certificates including the domain name emeraldwhoswho.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.emeraldwhoswho.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5qx0hG5HmWVOmVqCn/
6pkSaz+wx7sM++SLpRmi/dnGobCWYq5QCbXRpxf028+2qh47ByIMMz0lXcbX34Kd
wBSvGr2j7qAdeJAe9qpEyzZ8Yu3Zpf57XpuDp4HLmCBDg6PCgZ6l0DoDFrFh0+Xw
r5LlrxVWehtiN41tHUPaWJxqZNLnNngeJFDbqxC/I7K5F1Hz9K6BwBCrebT+qbB/
ka7w+oGA1BzXuuSGRQsQ1RH6phwy9ZKIrNJM/1YnC6pG2B6+c6MrGU9muyzCcojA
OQ5h6qdvJ8hLTEGWV4QvF4/gNcu0AM1TxHAFV5biJ0xTaLFSFGnj7mWUDkIyEmeh
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54330266491437108657199264285910362479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OptimumSSL CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OptimumSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OptimumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.emeraldwhoswho.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22540646775050855843217886459700715987724557238344345654622998479797579576818653354083099896182453381112160086124216413298120489874109654476294601585687079207656581904637757319016299288159017288909533415422540242756988825653564896424340681100422131433320440270075500717264321904289410797319329193650975410280645463233634918362676372495788776478210824369013920516889645992888232598123359391498753814768016217783539899740618493165483402178028902402142375393454399832655060846085317602534166879492625154411956095146669524859969275242773522371030693826404228159472949384379650187243858655159487076326232721108980113842471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8b0f35ab5f46dbcd409ddfc8c75d835b48a3ab5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7d86e142f193b54db2fa5454d189e49de869fdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.21
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.optimumssl.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/OptimumSSLCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodo.net/OptimumSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/OptimumSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldwhoswho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeraldwhoswho.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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