DV SSL/TLS Certificate for secretplaces.pt

Certificate is witin its validity period

Issued by DigiCert Inc (Thawte TLS RSA CA G1)

About the secretplaces.pt DV SSL/TLS Certificate

This certificate with serial number 0d:49:57:13:11:f4:91:b1:14:f2:e0:9e:f0:e7:df:39 for secretplaces.pt was issued on by DigiCert Inc.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for secretplaces.pt provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0d:49:57:13:11:f4:91:b1:14:f2:e0:9e:f0:e7:df:39
Serial Number (int): 17660767696404465307653584334344412985
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: b9:d4:4b:89:d6:82:c8:a1:1f:e1:0e:47:29:d6:66:56:e9:61:e9:5e
Authority Key Identifier: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (SHA-1): a3:6c:6b:08:17:34:30:ae:c1:fc:53:01:20:59:e7:00:8b:48:fa:c2
Fingerprint (SHA-256): e8:44:b3:a2:1e:6b:53:70:4c:e8:b8:00:ae:44:69:85:57:20:47:49:e0:f1:d5:66:42:e2:dc:e5:8e:17:f3:1f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate secretplaces.pt
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for secretplaces.pt

Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for secretplaces.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17660767696404465307653584334344412985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secretplaces.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4889888557173071645216365994740807783785026247387850442910401021967463050699464255388020666574729208230604358043080123816776867780990517180232144761936432379819815117923255303175097241304000123301026273260493221795574722414010158388649789051402420718875716570908157744933504347527016369745645709195841710412681534803076717549697686967632741861967776598984261688701636835734855241227930916711103929047021887363071324376936505116072331901842766758197822024616276619941866578267828784223214893678429205512637836356411400500721210071840553612738146240114906728263131538503135680179613237327379668686235019861646513116908415270325758578058497585326295944889023574243645099491682515249077851426966397807229381480643897797405382810641743550256262615540574545498722076569865656684774652950393447186268347486696541882207517890226303864640367267034764874418487022955173699793863583550516280426325571363882437889006968435360860453574343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9d44b89d682c8a11fe10e4729d66656e961e95e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretplaces.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretplaces.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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