memoq.tekloc.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 48:6b:d3:c7:f3:95:84:76:08:6c:6b:76:01:f8:91:ae was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=memoq.tekloc.net,OU=Domain Control Validated+OU=PositiveSSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 48:6b:d3:c7:f3:95:84:76:08:6c:6b:76:01:f8:91:ae
Serial Number (int): 96264286890593493109797454575098696110
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: de:95:e4:e1:79:88:78:33:a1:35:6c:d7:6a:c6:53:55:02:a4:a8:fd
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 00:8f:a5:c2:5e:68:b5:ac:fc:5f:a9:38:e0:36:2e:12:d3:77:05:d8
Fingerprint (sha256): 28:da:c0:1f:c3:60:e3:d3:25:b7:f8:00:fd:25:2c:b7:ae:2a:e2:a0:a5:29:5d:dd:e9:4f:b4:f1:3f:b7:03:7e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate memoq.tekloc.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for memoq.tekloc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

memoq.tekloc.net
www.memoq.tekloc.net

Other certificates including the domain name tekloc.net

(limited to 100 certificates)
status.tekloc.net
www.tekloc.net
www.tekloc.net
mongoose.tekloc.net
mongoose.tekloc.net
status.vleo.net
status.tekloc.net
mongoose.tekloc.net
status.eurabo.be
memoq.tekloc.net
www.tekloc.net
memoq.tekloc.net
www.tekloc.net
wallis.status.app.vista.co
mongoose.tekloc.net
status.tbft.org.uk
www.tekloc.net
status.cs.redwood.com
status.tekloc.net
status.tekloc.net
mongoose.tekloc.net
www.tekloc.net
status.eurabo.be
www.tekloc.net
status.hotel-spider.com
status.cs.redwood.com
status.absis-ciborg.com
status.cs.redwood.com
status.eurabo.be
www.tekloc.net
status.eurabo.be
memoq.tekloc.net
status.eurabo.be
status-mena.obrela.com
status.eurabo.be
mongoose.tekloc.net
www.tekloc.net
www.tekloc.net
memoq.tekloc.net
status.eurabo.be
status.premierforestgroup.com
status.tekloc.net
www.tekloc.net
www.tekloc.net
status.eurabo.be
status.cs.redwood.com
status.eurabo.be
status.tekloc.net
www.tekloc.net
status.eurabo.be

Certificate

The complete raw certificate details for memoq.tekloc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9QGCWVpONqQhYxW1qUh
hfaCfr/fwd83fPIn8pv3YTwt8LJc2VIU5SbzjfH5hmhEcsKdkRO4cLfJqL+G9RKm
ZwFKGMiwREnJ+R8/4djsGW5wepjaMuhIO0wJHVW4nhJq3HjMETEHW8i1qK6mCONp
3bIRyfroJAnaZqIyukVaMVpYEoU0Gubfgs5yW9aA+JT8XFHGgoqvNX7greenL/tG
Ue/F8tcj+LRnv3VxCuNM1FOAOCjbPD/0DOfEDWxEDXvBTkAjZH1x+BQEkmm1oO2x
IJ/GZ4BOAUp8MxEncAiyr4XHgsifwIxgk+tF6kktA+GeEIGKc5J7aISbbu95IFpd
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96264286890593493109797454575098696110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'memoq.tekloc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25225975412707877152999241491169753177994172311887968116299929017104913478050542086187457107613619498113165421655118379147168138519334232762953163343081369246357793069873654606217135725146770856409738523979716079992596693745853491614215670005885020370585692563780901811810213188809095071353080432876058069108594519231205040854461718698676898229834183488429881740772848930186431355742096794581034934818436890305181674160761571674302008740174967289165605540272110552133093816435411000497904951320349887007827955276054119881034455553547018635115258187369556460361229708824149513728806063442081318308617123965189855272221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de95e4e179887833a1356cd76ac6535502a4a8fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memoq.tekloc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memoq.tekloc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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