*.redia.dk

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 15:29:3b:c4:78:c4:8d:61:ab:e0:0e:c3:9b:82:ed:9a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.redia.dk

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 15:29:3b:c4:78:c4:8d:61:ab:e0:0e:c3:9b:82:ed:9a
Serial Number (int): 28127884310945447802713930381402500506
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 08:53:b1:cc:6f:63:5f:38:29:a8:62:8a:4b:dd:05:b3:18:02:d9:9b
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 40:fc:25:cf:f7:3f:33:f1:89:2b:05:a2:01:99:c3:a6:43:16:8a:b9
Fingerprint (sha256): 29:2d:e0:cc:4a:31:00:1c:81:87:e7:89:64:96:9b:b9:05:0f:7f:d8:33:31:ea:8c:a0:bb:59:b2:8c:7f:9b:b3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.redia.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.redia.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.redia.dk
redia.dk

Other certificates including the domain name redia.dk

(limited to 100 certificates)
netdata.kpots.com
sistema.onestater.com.br
comercializadora.net.co
www.nziswano.co.za
ucdavisathleticcamps.com
www.lockhavencamps.com
newenanalytics.uy
php-packages.redia.dk
www.enceladus.consulting
console.dev.gendocu.com
payment.upwire.com
appslinks.semillaproyectos.com
www.elevakademiet.redia.dk
www.gccon.com.br
www.beanvest.com
dev-dashboard.blendid.com
cinedownloader.in
gamecraft.app
www.parrify.com
auth.napislekarovi.sk
pefi.simonschneider.org
segcontroll.com
www.agndevelopment.com
new.piscinapp.com.br
libry-admin-staging.redia.dk
www.radiotiempodedios.cl
www.alyahya.ws
libry-admin.redia.dk
bit-size.com
elevakademiet.redia.dk
hived.ai
redia.dk
dazz.spillpdf.com
classicbakerynsnacksadmin.estore.business
yagmichestate.com.au
unity.maxsold.dev
library-dev.redia.dk
godutch.app
*.redia.dk
earthlingrescuealliance.com
www.fpmutual.com
enema.video
tmb.gyldendal.redia.dk
it-of.de
mmc-tool.redia.dk
aalawaustin.com
teknologi.gyldendal.redia.dk
angrypenguin.io
pollster.zrimsek.com
*.redia.dk
www.celebirth.net
pwip.co
cure.healthcare
elitesalesut.com
playground-landing.myxplor.com
www.mi-agenda.com
hived.ai
*.redia.dk
mmc-staging.redia.dk
csr.uat.localcover.com
www.ctkca.com
racoonnetwork.com
*.redia.dk
www.circgovt.com
www.artinrez.com
weather.tognacci.net
www.nilshein.com
bili.tayo.today
www.jomart.co
megadix.it
damishael.com
gotrybuy.com
www.sentoo-sud.tn
engageto.ca
grazie.telethon.it
link.baund.com
www.formelsammlung.org
gyldendal.teknologi.staging.redia.dk
redia.dk
mentornow.me
www.flashtourmyanmar.com
museumplatform.redia.dk
siatur.tucanviajes.com
tobiaseilertsen.no
dev.streamlion.app
theharispa.jp
www.noerdlichedigitale.de
www.lafinyhealth.com
sheet.24hours.jp
www.transformationalbreath.com.az
teknologi.gyldendal.prod.redia.dk
farah.app
dev.chromium.org
teknologi.gyldendal.staging.redia.dk
taskmanagement.yiplasters.com
functions.quarkjs.io
communicator-testing.flutaro.de
filemark.app
sv.metastre.am
puckerandplay.com

Certificate

The complete raw certificate details for *.redia.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx22x4ubkwV6smoiI1lNf
osoqfn9cJEgU+nALvcpEOUGzBKdbZ5/4ovg7krJ4St/SON3J2OXaN6+si649vIu0
zcA5yf7cVkEaGKO6ne01P1gdOgvOock6IodT7+6pU/xxCbnVo5rGQQs2UjrMFdcG
3xUupjRr8Gz/RRP2xyZXlHwMfjJT/+w0cItzj8yMRseppEdYxmikGbWxK7jjW323
DgwsNJ4YIvCaNCgl8XIIwD2HjgDk8uU2b8OM32JPqBBvzOxvqxqQlXtUdymWncR6
82nxR6M87j6LOwDQ8+MQ5ZYgYakpgB95EEoDsPBBVl+TPKjlG9Sf3L5NqkU2UKaq
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28127884310945447802713930381402500506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.redia.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25175515243959514445459096215947657508714064048915665601645912077532972921786390408458068259190563589240829240724526030605442469401939098001108210746451816999404890031872162514249916441604571496124585508540527621278296819302505175365429361646397765942364562874680099197600890130861859127816392011556368457411633720942913402401802485355121584705965551933455035891211276783776184066274963786072018719865337786007168800563715835768497275567357808260028036721025223220787759672131410450333299831588331393331987508488947186755456225810667334098185828093245101137038559012805593373221705821340408462791726857233885936659043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0853b1cc6f635f3829a8628a4bdd05b31802d99b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redia.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001876f1b1c8a0000040300473045022100b1b8e3b214c404e4c8127bf7c0a2dcbe5e41b04eaad766a8ff87e6f8d2baac46022050ee625bceaa59cd62c04989047059fd19d3f9da4c491bebb4070d554a82345f007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001876f1b1ce200000403004730450221009be6d2522f43a2df880f5d15c27b93da82986ccdd28fc9e5b4658994bfc3e5fb0220328dc7ef84ca29fdf001748eee2bb38018f08e0d7b6860b453084cb8c355df7c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001876f1b1d070000040300473045022066911abb2404ed3ee6e49581760824033addb730808b170947b32bf6b219b40f022100cd84569f8da14ccb62dc72e4bd91e1909c324fe12421678e9f4ac4020a5349f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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