naft.com.sa

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:39:99:e7:a5:f1:a9:b8:23:f2:2e:bf:6e:b3:56:7f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naft.com.sa

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:39:99:e7:a5:f1:a9:b8:23:f2:2e:bf:6e:b3:56:7f
Serial Number (int): 2957538474238395641046461088139531903
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 36:52:5d:4a:f3:ba:0f:ed:18:0b:65:0b:35:49:d2:46:1a:ad:62:2d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 20:77:f6:36:2e:1a:96:41:72:d0:83:5b:25:b8:b2:7e:71:a5:3a:f0
Fingerprint (sha256): 23:bd:ef:6d:14:04:0d:36:1e:dc:c7:55:37:50:35:d1:92:4f:69:27:0e:8f:d1:ce:a4:a7:41:11:81:8f:b0:70

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate naft.com.sa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naft.com.sa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naft.com.sa

Other certificates including the domain name naft.com.sa

(limited to 100 certificates)
soporte.m-studio.one
helpdesk.media-technica.com
support.lpros.biz
support.jumbish.co
helpdesk.royalamericanhospitality.com
support.jumbish.co
cpanel.naft.com.sa
mail.naft.com.sa
support.cymetricx.com
support.snapcastweather.com
helpdesk.royalamericanhospitality.com
tktdesk.qtesting.online
support.lmp360mediagroup.com
helpdesk.fibraforte.it
support.xeroxuae.cloud
support.jumbish.co
ticket.savvyhawk.net
support.snapcastweather.com
support.intellitechsystems.co.za
help.rmgautofinance.org
support.intellitechsystems.co.za
support.maxopolyworldnews.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
suporte.sanus.tech
support.firstresponse.solutions
helpdesk.media-technica.com
naft.com.sa
support.jumbish.co
support.cloudpso.com
tsmsupport.lenovocloudsoftware.com
soporte.avp-ec.com
support.jumbish.co
support.vembu.com
assistenza.ecologica.it
support.yoizen.com
help2.jdeckman.com
support.periodik.co
support.intellitechsystems.co.za
support.lpros.biz
support.intellitechsystems.co.za
support.jumbish.co
it.ronati.com
naft.com.sa
support.tilopay.com
support.intellitechsystems.co.za
soportesistemas.uaa.com.ar
support.threepedals.com
support.intellitechsystems.co.za
support.caprarotechnologies.com
support.intellitechsystems.co.za
support.sreeveniv.com
survey.naft.com.sa
support.firstresponse.solutions
support.jumbish.co
mail.naft.com.sa
support.tilopay.com
support.swarmrewards.io
mail.naft.com.sa
suporte.pizzattolog.com.br
support.intellitechsystems.co.za
websupport.cosmickmedia.com
support.intellitechsystems.co.za
support.ehakkexpress.com
tsmsupport.lenovocloudsoftware.com
suporte.pizzattolog.com.br
support.evareg.com
cpanel.naft.com.sa
support.threepedals.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
tsmsupport.lenovocloudsoftware.com
support.cymetricx.com
support.ehakkexpress.com
soporte.tecnocomprascr.com
support.firstresponse.solutions
naft.com.sa
support.vembu.com
helpdesk.fibraforte.it
help.odce.arizona.edu
binance.dlocal.com
support.intellitechsystems.co.za
helpdesk.ga-integraciones.com
help.slice.lol
naft.com.sa
support.jumbish.co
staff-kb.profilegorilla.com
soportesistemas.uaa.com.ar
support.ibaia-immobilier.com
cpanel.naft.com.sa
ticket.savvyhawk.net
support.intellitechsystems.co.za
staff-kb.profilegorilla.com
tsmsupport.lenovocloudsoftware.com
support.sreeveniv.com
knowledge.telware.com
support.lpros.biz
survey.naft.com.sa
support.vembu.com
fuv.citek.vn

Certificate

The complete raw certificate details for naft.com.sa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz2SRFgtgjGSuuhWimla
z6Lp6Fbernw0/dDIjerFjWR6/vJ2wzzViwPF1LfqKlYnAs9IjOThu74KtVDXHHCB
BCJbJB86WYaKN6KMBYXQNUXvzMkVx4iknI9COy1GNJKVUoDIq8ZCeL1DVEA7pcu8
PElgbWLQ90U8vgTG1J41+tnN4JZnlo3sRHyIrHeLLVXBrSWtvBp0BEhzEQVmz6Yd
K1pbdXrOaOwpzP0YxDzWctz+9xfFKbb4Ve7fZMyUVjwctGN2YpeyIPsbftRs4I9Z
v+w5NE5zjaz415oK0s1DmTq1lF3gvBMr693F009lA6BL6VIsVwaUlfNfcZYljn6K
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2957538474238395641046461088139531903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naft.com.sa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20102252456534116831595890936853082468579114019054387983549759167760734511056562097598528792690153609846484020445001126163120205261889538340493460844268877874013771272133203417312437060650974470513311414634509821234013025000047492576842201867109937381273542869314191481961095973024938638725201224928106848682522321467652442566613703001857294727086419861966497397591402857604281002279502682458972872655951548539957845116791609868479224855396170667690714378783072212807852768369603969854489603247137116348400375772253947194515583119258716438695383910360333408031959019393634840311597414928299220696430861680596051986993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36525d4af3ba0fed180b650b3549d2461aad622d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naft.com.sa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186fd43f6b60000040300463044022028a88dae40f815ced23ff3c7f81bb38e4ad5889afcbca97fcdde395f3382b766022069f6dae2b3fc40c9236c7d50aecbf6c620cffd0f4bf1238d9d3b42525c578afe007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186fd43f6610000040300483046022100cce5fcb54d6d5a62d43a84b461864068e659ba9060ec89b50f92aefdeb13fa8c022100a12a2a9f1a7ca5caa648ee78bb1481d28131c71d0e78030a44a8dc70369bf6d20076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000186fd43f6b10000040300473045022100da17b8ee95db06375deb81108f9f210f3482a1284d393e98d646445a9dd474410220492d80f9f2c6081591ad1c32bb801e12cb7e724737de07009b4494ac554405da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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