wunderbar.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:18:0c:15:4d:12:27:c7:12:96:98:81:ae:37:25:b1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wunderbar.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:18:0c:15:4d:12:27:c7:12:96:98:81:ae:37:25:b1
Serial Number (int): 2783316192733618494019484687147673009
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f1:b7:07:22:80:f1:56:46:46:e5:63:ee:5e:e0:b2:7a:29:b8:c1:20
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): a6:b0:b4:32:a5:54:c1:bd:dc:68:fe:7d:73:98:5c:86:bb:bd:df:3e
Fingerprint (sha256): 27:12:ea:48:f3:c9:f0:60:27:0e:db:ab:8c:b8:da:50:67:2b:1f:10:9c:9d:7a:12:6a:f7:1c:fa:ea:13:3b:f3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate wunderbar.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wunderbar.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wunderbar.com
www.wunderbar.com

Other certificates including the domain name wunderbar.com

(limited to 100 certificates)
support.wunderbar.com
fdus-3.freshdesk.com
support.mc.spe.sony.com
support.wunderbar.com
helpdesk.mydistance-learning-college.com
support.mc.spe.sony.com
www.wunderbar.com
fdus-3.freshdesk.com
support.mc.spe.sony.com
support.mc.spe.sony.com
fdus-3.freshdesk.com
fdus-3.freshdesk.com
wunderbar.com
support.wunderbar.com
support.wunderbar.com
support.wunderbar.com
support.wunderbar.com
support.wunderbar.com
support.mc.spe.sony.com
support.mc.spe.sony.com
helpdesk.mydistance-learning-college.com
fdus-3.freshdesk.com
support.wunderbar.com
www.wunderbar.com
support.wunderbar.com
fdus-3.freshdesk.com
www.wunderbar.com
support.wunderbar.com
support.wunderbar.com
fdus-3.freshdesk.com
support.mc.spe.sony.com
fdus-3.freshdesk.com
fdus-3.freshdesk.com
support.wunderbar.com
fdus-3.freshdesk.com
support.wunderbar.com
support.mc.spe.sony.com
support.mc.spe.sony.com
wunderbar.com
support.mc.spe.sony.com
www.wunderbar.com
rm.wunderbar.com
support.wunderbar.com
fdus-3.freshdesk.com
fdus-3.freshdesk.com
support.wunderbar.com
support.mc.spe.sony.com
fdus-3.freshdesk.com
support.wunderbar.com
support.wunderbar.com
helpdesk.mydistance-learning-college.com
support.wunderbar.com
fdus-3.freshdesk.com
www.wunderbar.com
support.wunderbar.com
support.mc.spe.sony.com
helpdesk.mydistance-learning-college.com
support.mc.spe.sony.com
support.wunderbar.com
www.wunderbar.com
support.wunderbar.com
fdus-3.freshdesk.com
www.wunderbar.com
support.wunderbar.com

Certificate

The complete raw certificate details for wunderbar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2783316192733618494019484687147673009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wunderbar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859339324617668199557251885439400420955591716078127705581918016283852563431690180515564168002030383729917561349988517904768144266699351733333502194229300076432057145097814888841628826993849761474266917508538041588058174135663969039418021510741300041162961147037865734659954393564510717518975952275705592717623195319317237185695909217519414665575996242391456861406787380029643102498763980694428538555409507098637586658062794367328567609887555832223788700927679091745013609151795029307584500445826423051575863073158616908181059617694178163539426769144120116271872701883559440886170416266148530501225655897643664034612474408309080588919540581713823808439487749332743908421793689568598224213392718745276233498972391532732810494588504798102852506727137407616625050503916437390377188747135122407529878920100462933857887156287926311008586236911509443028981028399701530280703149232851434309194402018942952603259261962812078155274585244926275458706438312596794803431661249073721715406743980222220422412177454725679232117079496017370852955634512239206872528014919322268494535603606774802840202233482102399604294703031470941048905505673883818852083319348332788226025558043785179227066896999578279029541517046800536817817220228672320991060648431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1b7072280f1564646e563ee5ee0b27a29b8c120
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wunderbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wunderbar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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