www.cosentino.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:ef:e8:6d:1f:46:c3:ab:e8:dd:12:1d:cf:79:44:09 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cosentino.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ef:e8:6d:1f:46:c3:ab:e8:dd:12:1d:cf:79:44:09
Serial Number (int): 19854865054755991410694945988941530121
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:67:2c:7c:09:a7:df:08:2d:a5:56:ac:55:4f:b8:e9:0e:3c:ba:9e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a1:88:19:14:d0:70:71:c8:05:34:f9:19:45:54:db:6b:ec:19:61:01
Fingerprint (sha256): 23:f1:b4:80:e2:51:f8:5f:d8:b4:0b:f9:b8:67:37:82:0c:00:5e:46:9e:22:36:f1:00:4e:60:6a:d2:34:5e:25

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.cosentino.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cosentino.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cosentino.com
cosentino.com

Other certificates including the domain name cosentino.com

(limited to 100 certificates)
*.imgix.net
microsite.cosentino.com
imgix3.map.fastly.net
imgix3.map.fastly.net
colors.cosentino.com
imgix3.map.fastly.net
*.cosentino.com
shop.cosentino.com
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
pro.cosentino.com
sa427gl.wpc.edgecastcdn.net
sa487gl.wpc.edgecastcdn.net
mkstore.cosentino.com
jobs.cosentino.com
dns-vetting1l.map.fastly.net
sa524gl.wpc.edgecastcdn.net
sa524gl.wpc.edgecastcdn.net
imgix3.map.fastly.net
dk.cosentino.com
apiepro.cosentino.com
osh.cosentino.com
osh.cosentino.com
sa487gl.wpc.edgecastcdn.net
content.cosentino.com
pre.cosentino.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
appidinet.cosentino.com
imgix3.map.fastly.net
imgix3.map.fastly.net
*.imgix.net
*.cdn.royalcanin-weshare-online.io
imgix3.map.fastly.net
sa427gl.wpc.edgecastcdn.net
assetsmedia.cosentino.com
intranet.cosentino.com
imgix3.map.fastly.net
epre.cosentino.com
imgix3.map.fastly.net
*.imgix.net
mkstore.cosentino.com
colors.cosentino.com
san-3-s12.tlsprovisioning.exacttarget.com
samples.cosentino.com
securevpnusa.cosentino.com
*.cosentino.com
san-3-s12.tlsprovisioning.exacttarget.com
visualizer.cosentino.com
apps.cosentino.com
*.imgix.net
sa524gl.wpc.edgecastcdn.net
imgix3.map.fastly.net
content.cosentino.com
sa427gl.wpc.edgecastcdn.net
imgix3.map.fastly.net
apinewe.cosentino.com
imgix3.map.fastly.net
hdviewer.cosentino.com
apinewe.cosentino.com
sts.cosentino.com
imgix3.map.fastly.net
*.imgix.net
logistic.cosentino.com
hdviewer.cosentino.com
media.cosentino.com
www.cosentino.com
securevpn.cosentino.com
sa427gl.wpc.edgecastcdn.net
sa487gl.wpc.edgecastcdn.net
media.cosentino.com
cosentino.com
sa427gl.wpc.edgecastcdn.net
connect.cosentino.com
samples.cosentino.com
tools.cosentino.com
sa524gl.wpc.edgecastcdn.net
imgix3.map.fastly.net
sa487gl.wpc.edgecastcdn.net
*.imgix.net
visualizer.cosentino.com
imgix3.map.fastly.net
sa427gl.wpc.edgecastcdn.net
news.cosentino.com
imgix3.map.fastly.net
sa524gl.wpc.edgecastcdn.net
static.cosentino.com
*.cdn.royalcanin-weshare-online.io
hdviewer.cosentino.com
*.imgix.net
osh.cosentino.com
mkstore.cosentino.com
assetsdev.cosentino.com
samples.cosentino.com
sa427gl.wpc.edgecastcdn.net
news.cosentino.com
visualizer.cosentino.com
forms.cosentino.com

Certificate

The complete raw certificate details for www.cosentino.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGgyyHrb3qSOyuojR6v6
gsv0boeTWPkdC6p2hd/vPuTK1BGlBiS2ovx6tMwXuhW97pxK1UUkP2wlNXzYzLYH
NFDQDpN8HTrJ5xdq4X4O0nBLSYfJ+gJayafhpfJfviQT2DbD5nNTS5lALRx235vk
PJ03Tl05hmvvURzuPSViIfptgvqGtDB0pfdTigOrbqXslG/69dsRewVnzvqmwiM0
X5Mm9P0s12eklwDyDsIcuOfopd0tChK7FJyH18yy5jpXyqYNjIE9f/lkfq9fRo3l
S/W1mIMF3QUm2p3diQZPND60xZ6Qcj3fiVBwWBMb+ggpBL0BqDYTu2H2Kc5QUPRH
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19854865054755991410694945988941530121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cosentino.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20249510926634145722307146586099029446545060052378612209698498493357551741296767942579458140594083062368562474759520531179701367334896560687498141864978860184335642376096499857626586120451498117076755617504143795191793921413165439844146745341710115392354268152775593928643594484467947562540006262371457869364764537217808448799872827958210915409433670813064615658010751085496996202077693381473794216923134920449476974642144847216442870332391930873561273354730142306754725597504540065335684097577679137103578702947723778063943588814886165160557040084980622553524172094169315005338298340479032147881199089590886863226699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e672c7c09a7df082da556ac554fb8e90e3cba9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosentino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosentino.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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