resorts.travelwise.com.do

- Travelwise Consultores de Viajes SRL -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:45:37:4d:4c:79:ae:11:6f:d2:bb:f1:d8:42:ca:5b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Travelwise Consultores de Viajes SRL

Organization: Travelwise Consultores de Viajes SRL
Locality: Santo Domingo
Country: DO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:45:37:4d:4c:79:ae:11:6f:d2:bb:f1:d8:42:ca:5b
Serial Number (int): 18968582080992402551265188147607292507
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:32:cb:dd:3d:48:80:67:8e:0c:64:0b:c3:d8:e5:56:9d:98:10:77
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 99:ca:ea:a0:19:31:30:7a:e5:f3:8f:e4:c5:19:b0:e7:7d:0a:ae:d6
Fingerprint (sha256): 24:90:14:09:12:2e:13:ba:d9:1c:f5:ac:a7:af:c7:95:b4:e3:13:6d:55:4f:63:b3:ef:98:d3:4d:1c:7c:cf:64

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate resorts.travelwise.com.do

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resorts.travelwise.com.do

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resorts.travelwise.com.do

Other certificates including the domain name travelwise.com.do

(limited to 100 certificates)
jobs.strong.fitness
jobs.strong.fitness
careers.pando.ai
survey.mh1s.com
careers.virtualink.ca
fill.suhail.life
travelwise.com.do
travelwise.com.do
resorts.travelwise.com.do
assist.makasacorp.com
survey.q2solutions.com.au
reclutamiento.maxtalenthr.com
careers.pando.ai
reclutamiento.maxtalenthr.com
survey.inteligems.io
reclutamiento.maxtalenthr.com
jobs.okawa.sa
teams.speakoutillinoisllc.com
gpojuguetronsupportncg.netcontroll.com
jobs.strong.fitness
careers.conciercare.net
jobs.strong.fitness
reclutamiento.maxtalenthr.com
careers.bellevillemarket.com
survey.heurohealth.com
travelwise.com.do
survey.cieca.com
travelwise.com.do
fill.suhail.life
reclutamiento.maxtalenthr.com
jobs.okawa.sa
jobs.caseyandcompany.net
vacantes.travelwise.com.do
reclutamiento.maxtalenthr.com
survey.mh1s.com
survey.cieca.com
jobs.caseyandcompany.net
reclutamiento.maxtalenthr.com
survey.cieca.com
travelwise.com.do
reclutamiento.maxtalenthr.com
survey.cieca.com
jobs.caseyandcompany.net
survey.onibex.com
vacantes.travelwise.com.do
careers.conciercare.net
reclutamiento.maxtalenthr.com
vacantes.travelwise.com.do
careers.bellevillemarket.com
reclutamiento.maxtalenthr.com
careers.pando.ai
usgsurveys.usg.edu
careers.cloudangles.com
reclutamiento.maxtalenthr.com
teams.speakoutillinoisllc.com
survey.cieca.com
careers.cloudangles.com
jobs.okawa.sa
careers.wallstreetenglish.com
travelwise.com.do
usgsurveys.usg.edu
travelwise.com.do
travelwise.com.do
careers.virtualink.ca
mice.travelwise.com.do
travelwise.com.do
travelwise.com.do
careers.wallstreetenglish.com
vacantes.travelwise.com.do
survey.ajex.ae
survey.cieca.com
careers.virtualink.ca
careers.bellevillemarket.com
careers.wallstreetenglish.com
careers.bellevillemarket.com
survey.penuma.com
travelwise.com.do
teams.speakoutillinoisllc.com
jobs.caseyandcompany.net
careers.conciercare.net
jobs.okawa.sa
careers.cloudangles.com
reclutamiento.maxtalenthr.com
assist.inspiredagility.co.za
teams.speakoutillinoisllc.com
careers.cloudangles.com
careers.virtualink.ca
survey.cieca.com
survey.ajex.ae
survey.smartinconcepts.co
reclutamiento.maxtalenthr.com
travelwise.com.do
careers.pando.ai

Certificate

The complete raw certificate details for resorts.travelwise.com.do in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4UlrhCDjg61C93AH2O1
MEtQ0EYrhZDIID+s9elfrNCniQ7IJufHyVae+PJIeYKouanHUcx3LZzJWdIL7R0k
gc41W5FPlDRXXK7ffGyABwPlzEraQ2tld480SWq9+/6er+LTtj14kLGeVD09le0r
nMAk1z8pAL0IPYBuC3OqRo9slg25HYtj30Ldel078DwkQ1LSZDDSZj2MOlmqoWaI
pHs+vgFa4N/6PvyvwcZiVvnEj8CHLrFjHw8X+XYy1+jcZizYqbU/vsi9MKpYqhEW
H/H6A/ATpRWN6W/1GnV5tIQWL2eGM2IKAL6mw1tTBoBCfqrGHcUfRypPIatSFwW3
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18968582080992402551265188147607292507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santo Domingo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Travelwise Consultores de Viajes SRL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resorts.travelwise.com.do'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22157360694181959699679093642586745036636157337437542066416394812279363897745721250540893154930201495378358704210569974231950416495786295188997255592250694738910858875301866350850451905152682990642503973305749356043384150749510264445094853708538504990374007308663543074698739825859045356741981174989393613118128978977076065812863193261663432760815463623226649944459342727057260259732141100130845931947767768989725794652734379928531132878441972826382574294286141213786002830763479297548618230402031534148059798029309336163001222225014695186495195760501682931693037411229241892844655538406661700490172594750461397284621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb32cbdd3d4880678e0c640bc3d8e5569d981077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resorts.travelwise.com.do'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003af7ec60e5f5dc2eb7fa8d4606fb82a884b5fff3864434a3fc2fb55233db28c9908a12fa947992fbc6d512af899686a45e4f1c948635f8ece6f409497e6c43b7694506cc56183bef59fb77e737627e7b03c86efab6783ce998fad8680001fc49afaf7995a6efcab89c14bce828d14fdbb0fb89ddedacf6a27fbd32431f54a8f01e128f513b4520dccee1cb3f216d88c848d88125c7ca8e12afedc1a95f4b305dfaf0cb4fabe2925014d518ac59f82006449317f91f93cbcbb9b0ad92821b0fcf24a957747249ece6d143afc3d535ab36c4dcd5b48002812b09c4011f09b45d18cd95958274aaba44110dc1be189170f71ecaa81ce49118a7fde8a82c36ad97f4