*.secomea.com

- Secomea A/S -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:28:41:7c:7b:f9:2a:75:42:f2:66:f8:cb:3d:f7:f2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Secomea A/S

Organization: Secomea A/S
Locality: Herlev
Country: DK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:28:41:7c:7b:f9:2a:75:42:f2:66:f8:cb:3d:f7:f2
Serial Number (int): 6855160072550240836610527961735362546
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 23:a2:1b:b9:35:03:d9:8e:20:5f:3e:8f:f2:55:de:a0:0c:49:8b:99
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 14:18:82:15:82:88:05:5d:41:21:5a:94:c9:73:6d:84:8d:49:6b:d1
Fingerprint (sha256): 2c:6b:87:9c:c2:e2:f9:e7:60:be:8c:b6:8e:0f:e4:89:5b:4f:29:6f:94:e6:7a:a8:c1:ad:ad:9a:85:85:f2:3b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.secomea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.secomea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.secomea.com
secomea.com

Other certificates including the domain name secomea.com

(limited to 100 certificates)
sni185335.cloudflaressl.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
demo-gm.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm22.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm08.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
www.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
enterprise.status.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
gm52.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
test-gm.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
demo-license.secomea.com
boubyanstatus.mambu.com
gm07.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
kb.secomea.com
boubyanstatus.mambu.com
kb.secomea.com
secomea.com
sni.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
*.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
kb.secomea.com
boubyanstatus.mambu.com
*.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm41.secomea.com

Certificate

The complete raw certificate details for *.secomea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXVpccfIRIhHvqKqJYTF
JFzEO9dhsiy+RIEJe9Txe8rwDsVsw7TiqOh/zC+qroyoGNKfq00aad9jGfTrtsqy
VhiEb7IUsvaIRSfRjFo0Zc1wa+zPUAUx0+jEdqcmmQXqZ6aBBv0+BbwOZxEBwDkz
627gtbkh+vhYg7s7HPnSMCKHz8ImnLfCSmKcjzXNDYKhkkp7MiIjn9F1Ir3IFewr
K2D2NLqlj2h5GNdl48JFkGLY2na4SLQ4EGIaZJyVpXwfCh8qsrvcvIMuMRreSI2f
wiikz9uAH/am4dSLaGesKeVcPAdKPnFeP9haW2qH0bN0ZFZnp2jp2KlQ8KWHi404
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6855160072550240836610527961735362546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herlev'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secomea A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.secomea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20382265061565025089531258451059216440120578131776025986835618748173975494576343936794525913197387361764694499221768893437520507464716644136198454846192426893430314755343035650383940325060569833056811157667379537111543319461033091305141270035420468906935024129218723554202204653487715822895983100327511317847440492198122516132708015611552158785750920908338038246058595650529520238372420409146239077879868429217300303903986430147757709825178375359918221272811101807366924149703262855134174706335636806374907540545990692973043116562747173074069865212943014719898457350854194465996356610698831943267425626057625060587721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23a21bb93503d98e205f3e8ff255dea00c498b99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secomea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secomea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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