khairkhan.ar.gov.mn

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number a4:5e:f9:7e:4c:eb:e9:a5:0b:10:75:42:f7:b8:a8:4d was issued on by cPanel, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khairkhan.ar.gov.mn

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a4:5e:f9:7e:4c:eb:e9:a5:0b:10:75:42:f7:b8:a8:4d
Serial Number (int): 218486527539974324686480534126110222413
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: da:33:e9:e4:80:f7:0d:d1:d0:d2:f4:14:dd:5c:51:e2:25:aa:f7:45
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 47:5e:cb:e5:b3:d1:01:1e:1d:f3:c0:77:e4:2a:c6:e5:c5:6c:a5:97
Fingerprint (sha256): 28:f2:66:f4:9f:cd:74:1c:20:e7:8f:02:d6:7f:b2:9e:54:af:a8:d4:ab:71:5a:1c:7c:2b:d0:6b:da:24:72:4f

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate khairkhan.ar.gov.mn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khairkhan.ar.gov.mn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

khairkhan.ar.gov.mn
www.khairkhan.ar.gov.mn

Other certificates including the domain name ar.gov.mn

(limited to 100 certificates)
tsakhir.ar.gov.mn
police.ar.gov.mn
jargalant.ar.gov.mn
tariat.ar.gov.mn
arkhangai.gov.mn
tariat.ar.gov.mn
chuluut.ar.gov.mn
tsaguur.ar.gov.mn
jargalant.ar.gov.mn
jargalant.ar.gov.mn
tsakhir.ar.gov.mn
gazar.ar.gov.mn
erdenemandal.ar.gov.mn
ulziit.ar.gov.mn
ugiinuur.ar.gov.mn
mecss.ar.gov.mn
khashaat.ar.gov.mn
khangai.ar.gov.mn
inspection.ar.gov.mn
ugiinuur.ar.gov.mn
gazar.ar.gov.mn
bulgan.ar.gov.mn
daatgal.ar.gov.mn
burtgel.ar.gov.mn
police.ar.gov.mn
ikhtamir.ar.gov.mn
tsaguur.ar.gov.mn
khangai.ar.gov.mn
mcst.ar.gov.mn
khangai.ar.gov.mn
gazar.ar.gov.mn
tsenkher.ar.gov.mn
hudulmur-halamj.ar.gov.mn
muzei.ar.gov.mn
gazar.ar.gov.mn
khairkhan.ar.gov.mn
tuvshruulekh.ar.gov.mn
mecss.ar.gov.mn
bulgan.ar.gov.mn
tariat.ar.gov.mn
erdenemandal.ar.gov.mn
khashaat.ar.gov.mn
tsenkher.ar.gov.mn
hudulmur-halamj.ar.gov.mn
baigal.ar.gov.mn
arkhangai.gov.mn
erdenemandal.ar.gov.mn
tsetserleg.ar.gov.mn
arkhangai.gov.mn
tsenkher.ar.gov.mn
jargalant.ar.gov.mn
baigal.ar.gov.mn
chuluut.ar.gov.mn
tsaguur.ar.gov.mn
jargalant.ar.gov.mn
teatr.ar.gov.mn
tsetserleg.ar.gov.mn
khangai.ar.gov.mn
mofa.ar.gov.mn
arkhangai.gov.mn
arkhangai.gov.mn
ugiinuur.ar.gov.mn
mcst.ar.gov.mn
tsaguur.ar.gov.mn
khotont.ar.gov.mn
halamj.ar.gov.mn
chuluut.ar.gov.mn
tsaguur.ar.gov.mn
daatgal.ar.gov.mn
arkhangai.gov.mn
chuluut.ar.gov.mn
tsakhir.ar.gov.mn
arkhangai.gov.mn
tsetserleg.ar.gov.mn
teatr.ar.gov.mn
procurement.ar.gov.mn
chuluut.ar.gov.mn
arkhangai.gov.mn
mecss.ar.gov.mn
library.ar.gov.mn
jargalant.ar.gov.mn
mcst.ar.gov.mn
police.ar.gov.mn
baigal.ar.gov.mn
teatr.ar.gov.mn
teatr.ar.gov.mn
mecss.ar.gov.mn
library.ar.gov.mn
tuvshruulekh.ar.gov.mn
khangai.ar.gov.mn
mcst.ar.gov.mn
tsetserleg.ar.gov.mn
arkhangai.gov.mn
burtgel.ar.gov.mn
ugiinuur.ar.gov.mn
emneleg.ar.gov.mn
khairkhan.ar.gov.mn
muzei.ar.gov.mn
tsetserleg.ar.gov.mn
chuluut.ar.gov.mn

Certificate

The complete raw certificate details for khairkhan.ar.gov.mn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTNCX/kd46VQmZTld6cd
7Z9DXTO9m500W0UqCKHvbCuHUOLyedz7usD0etN7X0weZPCJJabZWDUsu93e06ux
mwKfvKTHhXxQsky/n+ITXQmz52yF8jJmU0NJ6CXeact2FDinQ847afrUs0aZZnqv
3DEguaUjeGnlzGbJQL1kxaDM+iKWZyBrJqeZWIaQRRdG9wi+/5uA65LQO2NazCj2
KlPpYqWHQGVEKlveAF2sAVMkr44FRTsf/Pgxqf5jRvuYOAhpdc81UDbwVhMQMYbO
fdazTeAU0wfmbDW4+rBZxFp3YNvd5csIQEa5bg+/SVq/hX6Gh9BOKhpXKVItglYd
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 218486527539974324686480534126110222413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khairkhan.ar.gov.mn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25904129409580563953752544198472532011202632136061522819570685994009147336917563315840963593963325024084870488707991835574863896596283546196591946991647416464879041830577736415367747322846624594315502315691918652478190527744013261760264324923172900233517293854603285843608487524904185138586797146682435688795341102644949601934578889976721555998893930548791158682763671438930437931171492096413162910747065568338589871315867780006366193442537485489250425971548534113414597770975586903111563816982299067435376429803042077805890802133350114916072566699484279045141191572792736681159632683737156459705998242684926172732753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da33e9e480f70dd1d0d2f414dd5c51e225aaf745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khairkhan.ar.gov.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khairkhan.ar.gov.mn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167b294bdb30000040300483046022100d9f61d332120102570731a99dc8b64fb4f412d40cbf48d8fdec6d90ef9987946022100c40a9a9cf3796cd8747d36d33f6b8e286081366142a7cfbe3cd3b3044e383663007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167b294bde2000004030047304502210096f975cc880fd0d26cdb153baa2d75a4baa299bcf69fd2e16a45884f269a054102202abb07c5df444a88d10b51767e4f2a6721a33df1c274cf2a74ba5a032ab36adc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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