*.parenta.com

- Parenta Group Ltd -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:61:a9:2e:2d:00:32:2e:e6:ae:a2:4d:30:f1:fc:42 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Parenta Group Ltd

Organization: Parenta Group Ltd
Organization unit: IT Department
Locality: Maidstone
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:61:a9:2e:2d:00:32:2e:e6:ae:a2:4d:30:f1:fc:42
Serial Number (int): 11140908147202760477116391707269790786
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:39:5b:08:01:c8:24:3c:75:de:53:21:51:87:64:72:10:1f:6e:c1
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 74:e0:31:50:93:fc:ee:e7:a1:70:2b:55:fe:f0:6b:76:53:a8:8b:b9
Fingerprint (sha256): 28:24:11:52:b4:6a:31:e1:f5:d1:dd:e1:f6:72:14:54:92:da:14:a5:b4:c8:0f:a2:e6:3d:d5:ce:1d:19:e7:8b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.parenta.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.parenta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.parenta.com
parenta.com

Other certificates including the domain name parenta.com

(limited to 100 certificates)
careers.rsaweb.co.za
careers.rsaweb.co.za
cyberbarometer.brooklynpartners.nl
support.parenta.com
forms.logiforce.com
help.parenta.com
survey.sheshtech.com
forms.reducemyexcess.co.uk
forms.itechforyou.com
careers.lewenet.com
parenta.com
guias.aerme.com
careers.ukbts.co.uk
helpcenter.moovly.com
careers.ukbts.co.uk
forms.reducemyexcess.co.uk
help.plurico.com
survey.eitep.de
jobform.progebouwadvies.nl
order.eastlabsphoto.com
jobs.42nerds.com
careers.geninvo.com
careers.danecca.com
jobs.bamero.de
surveys.lombardinternational.com
*.parenta.com
my.parenta.com
forms.reducemyexcess.co.uk
informes.ssixto.es
careers.rsaweb.co.za
form.mecalife.com
help.parenta.com
survey.khaoscontrol.com
forms.semigo.gr
careers.rsaweb.co.za
forms.reducemyexcess.co.uk
*.parenta.com
survey.sheshtech.com
encuestas.caetanoretail.es
parenta.com
careers.blueprintsecurity.nl
application.creditdigital.info
webmail.parenta.com
*.parenta.com
survey.eitep.de
careers.ukbts.co.uk
survey.sheshtech.com
subscriptions.profitroom.com
survey.wildling.shoes
*.parenta.com
careers.tecamb.it
survey.sheshtech.com
survey.eitep.de
survey.sheshtech.com
*.parenta.com
careers.rsaweb.co.za
formulaire.groupe-terresdefrance.com
careers.ukbts.co.uk
forms.reducemyexcess.co.uk
careers.ukbts.co.uk
eval.softworld.dk
formularios.imf.com
survey.sweet-move.com
customer-survey.castoredc.com
careers.tecamb.it
parenta.com
jobs.spectrum-dm.de
i6forms.i3clients.co.uk
survey.sheshtech.com
forms.reducemyexcess.co.uk
parenta.com
forms.reducemyexcess.co.uk
survey.sheshtech.com
billing.easynuts.nl
careers.ukbts.co.uk
*.parenta.com
survey.eitep.de
forms.likebility.com
jobs.silverside.com
careers.ukbts.co.uk
staff.parenta.com
survey.sheshtech.com
jobs.aarini.eu
survey.sheshtech.com
zoho.teslanow.de
scenic.guiding-group.com
careers.rsaweb.co.za
survey.sheshtech.com
*.parenta.com
*.parenta.com
elearning.parenta.com
help.parenta.com
jobs.liverestaurant.co.uk
staging3.parenta.com
help.parenta.com
careers.rsaweb.co.za
forms.basevision.ch
survey.eitep.de
survey.eitep.de
careers.tecamb.it

Certificate

The complete raw certificate details for *.parenta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tq3P+lmT1CoGjq5ABC7
q9tOUcnNIXMFCQ/FAyFXidcnvXTsI3Ub7Y+vrMpUUknHNAc9aAnhLiZw0b3O0QWv
AjmMHO7SxzdxstjRaqvuwpwuyBUm/MzPH1s5FIBWpWY+mtG5ruEsP0g2QY/QVB9L
T9OK+v/PkG0Ih4Dcu7u3vUJXngt1Zg00kdl552p9oojIeG04vH2R60tfv0JRbStp
WldWX7NZ0KeXtYh3dyTGcjc+iIgMHP6vnwPl9IApWZhumD0Gsh4Pk+Kx8RpF/r8p
lnRiZ36WKpphv7pzBxJdhThgwBHQMgxW4+Alebl5NYR9LPLD3Bh+5s1OOWxM8xXq
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11140908147202760477116391707269790786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maidstone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parenta Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.parenta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27627803272661159360969475055248095901230018964860003439000061641743507714163197224891535579935082834910887137956734239563690212205374128660934791660250086685106718498908153566666420710285721811951059548267596668395116792285487882775834955839300287381110654533005093663619696497226211714877017899553936173465201098788164556313334621575356752427387472249076851273510412177805897142949790488572583292335139010682929827055198569942578270196099421727952753371263372339001250094887247458635734075155145738770815902208128775579345048396390828484163355350215017827799171832387533388186046729197341589281832205234573539666553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d395b0801c8243c75de532151876472101f6ec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parenta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b454d5ffc451eacc5788b6fbdbcae11079cbc0f52999897f1f7c899290542c79e46a6533d02af3b642fc1abe486d2da7819b55b71f27efb59a864f51c0770ff961794eafca1b4a19e9a138badcfbba1bcff2e4faf9fd8919fe8f4d777a26711a45aa043b7f2543b68f7e78ff695f69ac9be5708d20abe10a0890c5396fdd7904faa8bc457fd8553e245ac5dcc52223c1bc91bf3178d39a136728d91c03c0b4fb901a159eeb45138276dd884739b9cdbac53ade578eb9708ddf5fda1d7c069addc66ca2a9da80b52e187e124af4ee0483823802516265d90832d5df62cd4f685a9a4db0e968d87bc2bce2b734ad02ad4e15e54f5d7b65a945d28e5b66651c601