fr.wiztopic.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:4d:c0:e2:a3:07:4c:0c:48:5e:77:af:1c:81:fb:96 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fr.wiztopic.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:4d:c0:e2:a3:07:4c:0c:48:5e:77:af:1c:81:fb:96
Serial Number (int): 9708315007265100390230104248928041878
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0f:41:29:60:61:2e:a7:6e:88:9b:e2:cd:cc:03:c9:3f:1d:ba:e0:98
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 46:85:32:bf:d0:6d:7c:0d:53:87:e4:ef:57:9b:61:81:41:4b:f3:d1
Fingerprint (sha256): 27:15:02:81:bc:8d:84:02:c3:59:a2:d2:52:18:06:96:16:30:73:06:89:29:1c:eb:1d:16:13:54:dd:13:05:fa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate fr.wiztopic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fr.wiztopic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr.wiztopic.com

Other certificates including the domain name wiztopic.com

(limited to 100 certificates)
actualites.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
sso.wiztopic.com
demonstration.wiztopic.com
actualites.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
pt.wiztopic.com
119370hd62107.wiztopic.com
actualites.wiztopic.com
en.wiztopic.com
en.wiztopic.com
en.wiztopic.com
fr.wiztopic.com
actualites.wiztopic.com
de.newsletter.events.renault.com
actualites.wiztopic.com
imperva.com
imperva.com
www.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
en.wiztopic.com
evenement.club.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
wiztopic.com
www.wiztopic.com
fr.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
news.wiztopic.com
landing.wiztopic.com
es.wiztopic.com
imperva.com
imperva.com
news.wiztopic.com
evenement.club.wiztopic.com
actualites.wiztopic.com
imperva.com
ru.wiztopic.com
es.wiztopic.com
www.wiztopic.com
sso.wiztopic.com
landing.wiztopic.com
wiztopic.com
de.wiztopic.com
actualites.wiztopic.com
news.wiztopic.com
www.wiztopic.com
linkcom.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
de.wiztopic.com
actualites.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
uk.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
fr.wiztopic.com
actualites.wiztopic.com
ru.wiztopic.com
news.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
landing.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
uk.wiztopic.com
actualites.wiztopic.com
actualites.wiztopic.com
www.wiztopic.com
tableau.wiztopic.com
www.wiztopic.com
actualites.wiztopic.com
fr.wiztopic.com
www.wiztopic.com
wiztopic.com
actualites.wiztopic.com
landing.wiztopic.com
wip.wiztopic.com
news.wiztopic.com
www.wiztopic.com
landing.wiztopic.com
en.wiztopic.com
imperva.com
linkcom.wiztopic.com
wiztopic.com
news.wiztopic.com

Certificate

The complete raw certificate details for fr.wiztopic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnjGWnrPWNA/Fpe6Unst
RNDNKI5juMXIwS+Nxcy4Djw/inmhVLZlqwi9X2QRlGfKan3dCR/wKrNlI60106TW
xb1nLiqC9kOhju1wixzsTP3rRMWti/KrJRuoaoM8b5JjoINGKGl5yQ7I/DO3nz/Z
m8F57RL/wE30AbrUngEDqE1yFRmuH+PZqTPTZT2nit99Tcfv2zDHJ9tthL3g5FXm
CN+Y+l+8Mrl81YIgDkFR7uZmO5Wam4xRIn+Ns2n1GdXqPul9UifQPkI62kYE+J2u
FcTTOoH/Sj1aja/pO+0Vp1q2z6GN2eHhDXxJ8sW3Rxw4pNC53Otz5geHJZFase4k
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9708315007265100390230104248928041878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr.wiztopic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22529974566462044634780961811843153794375858647668193859069997286187014217060162256958080140243811083610766685283401672563304277195147091785670986816228919912981607696500312942763075467809202438075000916260833302591892748094486980532446007105905546049320060695163864639849020223017038109626082059083291611131181028130727955534284088880974060803300003637926044870162610624878174511459727078643299471659574884204323883128718434541375306491020414588603949904583080431588696699679114898812349855459959184735410944239097436452322122824437871497629848151302952441474855256323729262474855100949260388641492328086468643660879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f412960612ea76e889be2cdcc03c93f1dbae098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.wiztopic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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