meet.hk.knightfrank.com

Issued by COMODO SSL CA

About this certificate

This digital certificate with serial number 66:ae:cb:3e:90:3b:e3:4b:4d:59:bd:be:8c:67:94:5c was issued on by COMODO CA Limited.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meet.hk.knightfrank.com,OU=Domain Control Validated+OU=Issued through Knight Frank LLP E-PKI Manager+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 66:ae:cb:3e:90:3b:e3:4b:4d:59:bd:be:8c:67:94:5c
Serial Number (int): 136488837509380337620939683196916175964
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d0:9d:88:59:85:55:81:7a:55:48:26:eb:d5:37:dd:48:b0:3d:b1:80
AuthorityKeyId: 1b:6b:bd:1f:8a:49:18:94:54:37:55:b4:20:17:ed:37:b9:77:18:7d

Fingerprint (sha1): f3:c7:c3:93:ad:a0:d1:c1:74:23:60:dd:05:dc:ce:07:ce:be:7e:03
Fingerprint (sha256): 25:23:8a:8d:5a:f8:3a:1f:02:da:5a:97:4c:e1:6e:a6:60:36:96:7c:d1:93:0f:dc:eb:59:3f:3e:22:55:11:15

Issuing Certificate URL: http://crt.comodoca.com/COMODOSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOSSLCA.crl

Check the revocation status for certificate meet.hk.knightfrank.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meet.hk.knightfrank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meet.hk.knightfrank.com
hklyncwebext.hk.knightfrank.com
hkwacweb01.hk.knightfrank.com
meet.asia.knightfrank.com
meet.cn.knightfrank.com
meet.in.knightfrank.com
meet.sg.knightfrank.com
sglyncwebext.sg.knightfrank.com
sgwacweb01.sg.knightfrank.com

Other certificates including the domain name knightfrank.com

(limited to 100 certificates)
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net

support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net

Certificate

The complete raw certificate details for meet.hk.knightfrank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAkSz4oG2qcp19gJ/SmB
gvmSnCQgwyVJ32/AIy1yibMFsDsH5P0TnX5VKsmGWxyyA+S4BP9hKkKNywDR1lDn
3gpCJQ9aJlm9LtFsz9N9/p3tZvMcMnm1zS168XPCHulCbTNjVC1EYvRor/nq1lvb
gbgUCexoNMSvgxsYFL89IILgbgD3LtOZceeA0rNi17e/dd6iDx+hZH9xGo/mjAMu
R6ySzzAzeNNm/0uqLcNFgiQiSj2kD5sVhj/NRaqB6UzYzbHwPHk6OgxNAyH4qiOv
OURrQBJsERFPxAvXESFtSNZCUd76Ph9NJOIqgc3pDzvBVAVR2D6NudS0V7gsOlCy
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136488837509380337620939683196916175964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Knight Frank LLP E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meet.hk.knightfrank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23737275633019484752084912227191243984122515048316381659447762248218084098739454319361317180812215310530287892496520416394763638555706152420137524796838933777086589919002276634650405887812801084952064559880714488796222589032653915270357791272674612444935387235252630929622481751177978970299666690234855859319555058342042544346045350497199580936085235213933367043748541305037806098112323165568761496671443265883944059814750344285262210718229022407306824237836958222880509167262450693441896013388092910968606339987280546811026066641349261010454442282411354534650969972954975693472351649813088069588943996633313600123517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b6bbd1f8a491894543755b42017ed37b977187d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d09d88598555817a554826ebd537dd48b03db180
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hk.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hklyncwebext.hk.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkwacweb01.hk.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.asia.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.cn.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.in.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sg.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sglyncwebext.sg.knightfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgwacweb01.sg.knightfrank.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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