*.civi-go.net

Issued by Gandi Standard SSL CA

About this certificate

This digital certificate with serial number b9:ab:ba:9b:1b:61:1d:3b:01:c5:63:27:b5:85:ee:ca was issued on by GANDI SAS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.civi-go.net,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL

GANDI SAS

Organization: GANDI SAS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): b9:ab:ba:9b:1b:61:1d:3b:01:c5:63:27:b5:85:ee:ca
Serial Number (int): 246798846800043860040146658852952469194
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 25:3c:65:1d:3f:8b:f8:3c:18:e8:ff:c0:92:3a:c4:b8:7c:5b:e4:c9
AuthorityKeyId: b6:a8:ff:a2:a8:2f:d0:a6:cd:4b:b1:68:f3:e7:50:10:31:a7:79:21

Fingerprint (sha1): 6c:d4:c3:ea:60:73:37:02:d0:fe:b4:c8:ae:0b:93:35:09:e1:da:29
Fingerprint (sha256): 2c:90:83:9b:cc:70:54:65:45:9c:1f:af:ff:98:bc:2f:c6:32:70:05:bb:ed:e5:81:af:ac:32:06:a9:9c:81:a7

Issuing Certificate URL: http://crt.gandi.net/GandiStandardSSLCA.crt

Revocation information

OCSP Server: http://ocsp.gandi.net
CRL Distribution Point: http://crl.gandi.net/GandiStandardSSLCA.crl

Check the revocation status for certificate *.civi-go.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.civi-go.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.civi-go.net
civi-go.net

Other certificates including the domain name civi-go.net

(limited to 100 certificates)
rmmalta.eu1.civi-go.net
asfes.civi-go.net
msfco.civi-go.net
asfes.civi-go.net
civicrm.demo.civi-go.net
asde.civi-go.net
rmfrance.civi-go.net
rmcroatia.civi-go.net
hbritanico.civi-go.net
rmphilippines.civi-go.net
invenies.civi-go.net
codigopropio.civi-go.net
invenies.civi-go.net
polisnetwork.civi-go.net
rmspanish.na1.civi-go.net
alboan.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
rmcanada.na1.civi-go.net
rmfrance.civi-go.net
barcelonaglobal.civi-go.net
lobomarley.civi-go.net
electronicswatch.civi-go.net
invenies.civi-go.net
msfco.civi-go.net
co.msf.civi-go.net
rmspain.civi-go.net
msfza.civi-go.net
amigosdeldesierto.civi-go.net
hosting.civi-go.net
hbritanico.civi-go.net
msfza.civi-go.net
rmcolombia.na1.civi-go.net
lobomarley.civi-go.net
rmfrance.civi-go.net
www.civi-go.net
amicsnepal.civi-go.net
msfza.civi-go.net
civi-go.net
rmireland.eu1.civi-go.net
intereconomia.civi-go.net
rmcostarica.na2.civi-go.net
www.civi-go.net
alboan.civi-go.net
whm.civi-go.net
rmfrance.civi-go.net
rmalbania.civi-go.net
rmfrance.civi-go.net
asde.civi-go.net
rmspain.eu1.civi-go.net
invenies.civi-go.net
amicsnepal.civi-go.net
bergwaldprojekt.civi-go.net
msfco.civi-go.net
msfza.civi-go.net
amicsnepal.civi-go.net
bam.civi-go.net
lobomarley.civi-go.net
www.civi-go.net
hosting.civi-go.net
asfes.civi-go.net
www.civi-go.net
prosalus.civi-go.net
www.civi-go.net
rmfrance.civi-go.net
rmfrance.civi-go.net
*.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
rmelsalvador.na1.civi-go.net
alboan.civi-go.net
bam.civi-go.net
*.civi-go.net
msfmx.civi-go.net
msfza.civi-go.net
radiomariam.civi-go.net
bergwaldprojekt.civi-go.net
msfza.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
fundacionrecover.civi-go.net
co.msf.civi-go.net
amicsnepal.civi-go.net
intereconomia.civi-go.net
bergwaldprojekt.civi-go.net
rmspain.civi-go.net
electronicswatch.civi-go.net
rmperu.na1.civi-go.net
rmcostarica.na2.civi-go.net
rmuruguay.na1.civi-go.net
prosalus.civi-go.net
hosting.civi-go.net
kubuka.civi-go.net
asde.civi-go.net
asfes.civi-go.net
amicsnepal.civi-go.net
barcelonaglobal.civi-go.net
rmlatvia.civi-go.net
msfco.civi-go.net

Certificate

The complete raw certificate details for *.civi-go.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoDuntox/azjgCOPrsihb
w6fX+ImEs18z3qK5ILohah0QKS7viqOpzq2BDd5yDN6n9Vm/1rTI5e0l/tstQADb
CmK1ET4qQc2RbqLt1Po2KIR4/t8eyUvCqWtdBdXz+spDxhQActcuhAiqaIMAIUb/
kqvjQtuhRR+/Ljqz01F7/qbyw23U+WV40BaWmjUraR2LhYCNWvYkTGLWBvdkBMzf
v4fTU0TZdEen4BMDfJapxsVpLo8QzuM6qLmsqLf2MCgegLW9wEmYh0zCLoucKJYO
s9g280ap6x6Hk27m27p921yplWliH94NBsRSEqtq6dYTFXV9gDfMnojgk5Z70BOX
nH9CKT2ve7ywVqwiZ7lQfGtM2fayzdA3KFpOlJELchND8zGgYOpESSdwtsVCf6zP
+HVC7CP5Dcig00uKDBCUzlPBlQbuvLxVGlqC2uTcu3MKVmwxEn53jyomjWrFH0t2
EsfGqIi67pZX+e3jFYDCoxthwhJ3iP6ZnO6UDDY+Tk9Xg9hUjy6rUefgKZoKymxy
EdG3B3ONQQPeIQZkvl/rR5kIh3yc4qGsB5YV4d6G+jm54hLdcrcUQG4EXn6Ktd0r
r52rUjmrwxUXKjS3Xq/HSLkqS/kSFr0R1ElSWxUcYv4nZMMqvnhKGmjdb334OtWc
ZxU1DCUIAP7OhdCsEtwpo7UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246798846800043860040146658852952469194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GANDI SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.civi-go.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653693721563163154542979648333354469739688860593339517526402482564567878187589915542542682062894080747331677145162574387634851412099368875904001172912147742299969032733749669156227753772192285291392023595199876248351027248052309939337703262150109756556214774038761375836331849742552156033186952363025600468356636067474918212411544046651445098915927492571221297599638369446301502132390010326211145777430934926346917720410912201434324648300504795154008343235328596494291848577847787457972846827036099108322016809907660524970843662385851693441701485550982851004650478719301958996112543968227324481885879901263286042717064708530681064314548300476461825314203289461677606421892523979072672828206203733276511660304384203601416269195395629273069072755976268455249802971100493412808540949954496137457482692498406977988236528332311082305789722411650513001035973514256669461227130013796916872538332511506874495296680001048479411167835280842272570889636278528256990508758658587764861311215807459973582097592372198769870020215241411599860737031706203225753359339684871787907839755353559410978682155432200578903364953260155930502792845581671821043123396378155005777356057055394856942400585285778794382103892556669070037447689036888789786200482741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6a8ffa2a82fd0a6cd4bb168f3e7501031a77921
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							253c651d3f8bf83c18e8ffc0923ac4b87c5be4c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.gandi.net/contracts/fr/ssl/cps/pdf/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.gandi.net/GandiStandardSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.gandi.net/GandiStandardSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.gandi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civi-go.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civi-go.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae659a16290cfffc2611247fa8b82445d43aae80e40fd67ce83ebec491a871e52121f4b4c0692e8e121855dec21874752541af3bbec3ec1746de238ff62487908467d04a416e9d8ad55805fcecd5d32da4331bfbc90e487eb3b7515711f914fa6dc0f5bff6178388351088893102104e8d7682d1fff8aafada6ce4d3a7b4735867463abd1f96e50c2a28789b2d180d6caa9d1ba6b61e72bde7180e75cedd3b138593ba085dbd8745e946cad5596c7abb8f5a75874827bd73955e6b77c2aa3e0a6de4844290fc25ffcec7c3b6316b47d751e9b79b66516dd114a19dca0e30208f8af29c0d552fdb11ae7e0f748ecf92a047a00765230e859122bee4a33fe2d054