*.civi-go.net

Issued by Gandi Standard SSL CA

About this certificate

This digital certificate with serial number 15:c1:c5:ac:bc:f0:02:7d:06:50:7b:9f:2c:5e:66:df was issued on by GANDI SAS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.civi-go.net,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL

GANDI SAS

Organization: GANDI SAS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 15:c1:c5:ac:bc:f0:02:7d:06:50:7b:9f:2c:5e:66:df
Serial Number (int): 28919910525589662689977276116601038559
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 25:3c:65:1d:3f:8b:f8:3c:18:e8:ff:c0:92:3a:c4:b8:7c:5b:e4:c9
AuthorityKeyId: b6:a8:ff:a2:a8:2f:d0:a6:cd:4b:b1:68:f3:e7:50:10:31:a7:79:21

Fingerprint (sha1): 33:17:21:23:65:be:f2:0e:8d:6c:b7:ca:22:ae:a3:f5:f3:3e:ab:9a
Fingerprint (sha256): 2f:59:07:14:80:ba:77:8e:11:a3:4d:a8:22:31:a4:74:0b:e9:d9:ce:19:fc:5d:9d:ae:68:f7:01:43:68:34:13

Issuing Certificate URL: http://crt.gandi.net/GandiStandardSSLCA.crt

Revocation information

OCSP Server: http://ocsp.gandi.net
CRL Distribution Point: http://crl.gandi.net/GandiStandardSSLCA.crl

Check the revocation status for certificate *.civi-go.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.civi-go.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.civi-go.net
civi-go.net

Other certificates including the domain name civi-go.net

(limited to 100 certificates)
rmmalta.eu1.civi-go.net
asfes.civi-go.net
msfco.civi-go.net
asfes.civi-go.net
civicrm.demo.civi-go.net
asde.civi-go.net
rmfrance.civi-go.net
rmcroatia.civi-go.net
hbritanico.civi-go.net
rmphilippines.civi-go.net
invenies.civi-go.net
codigopropio.civi-go.net
invenies.civi-go.net
polisnetwork.civi-go.net
rmspanish.na1.civi-go.net
alboan.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
rmcanada.na1.civi-go.net
rmfrance.civi-go.net
barcelonaglobal.civi-go.net
lobomarley.civi-go.net
electronicswatch.civi-go.net
invenies.civi-go.net
msfco.civi-go.net
co.msf.civi-go.net
rmspain.civi-go.net
msfza.civi-go.net
amigosdeldesierto.civi-go.net
hosting.civi-go.net
hbritanico.civi-go.net
msfza.civi-go.net
rmcolombia.na1.civi-go.net
lobomarley.civi-go.net
rmfrance.civi-go.net
www.civi-go.net
amicsnepal.civi-go.net
msfza.civi-go.net
civi-go.net
rmireland.eu1.civi-go.net
intereconomia.civi-go.net
rmcostarica.na2.civi-go.net
www.civi-go.net
alboan.civi-go.net
whm.civi-go.net
rmfrance.civi-go.net
rmalbania.civi-go.net
rmfrance.civi-go.net
asde.civi-go.net
rmspain.eu1.civi-go.net
invenies.civi-go.net
amicsnepal.civi-go.net
bergwaldprojekt.civi-go.net
msfco.civi-go.net
msfza.civi-go.net
amicsnepal.civi-go.net
bam.civi-go.net
lobomarley.civi-go.net
www.civi-go.net
hosting.civi-go.net
asfes.civi-go.net
www.civi-go.net
prosalus.civi-go.net
www.civi-go.net
rmfrance.civi-go.net
rmfrance.civi-go.net
*.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
intereconomia.civi-go.net
rmelsalvador.na1.civi-go.net
alboan.civi-go.net
bam.civi-go.net
*.civi-go.net
msfmx.civi-go.net
msfza.civi-go.net
radiomariam.civi-go.net
bergwaldprojekt.civi-go.net
msfza.civi-go.net
polisnetwork.civi-go.net
bergwaldprojekt.civi-go.net
fundacionrecover.civi-go.net
co.msf.civi-go.net
amicsnepal.civi-go.net
intereconomia.civi-go.net
bergwaldprojekt.civi-go.net
rmspain.civi-go.net
electronicswatch.civi-go.net
rmperu.na1.civi-go.net
rmcostarica.na2.civi-go.net
rmuruguay.na1.civi-go.net
prosalus.civi-go.net
hosting.civi-go.net
kubuka.civi-go.net
asde.civi-go.net
asfes.civi-go.net
amicsnepal.civi-go.net
barcelonaglobal.civi-go.net
rmlatvia.civi-go.net
msfco.civi-go.net

Certificate

The complete raw certificate details for *.civi-go.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28919910525589662689977276116601038559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GANDI SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.civi-go.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653693721563163154542979648333354469739688860593339517526402482564567878187589915542542682062894080747331677145162574387634851412099368875904001172912147742299969032733749669156227753772192285291392023595199876248351027248052309939337703262150109756556214774038761375836331849742552156033186952363025600468356636067474918212411544046651445098915927492571221297599638369446301502132390010326211145777430934926346917720410912201434324648300504795154008343235328596494291848577847787457972846827036099108322016809907660524970843662385851693441701485550982851004650478719301958996112543968227324481885879901263286042717064708530681064314548300476461825314203289461677606421892523979072672828206203733276511660304384203601416269195395629273069072755976268455249802971100493412808540949954496137457482692498406977988236528332311082305789722411650513001035973514256669461227130013796916872538332511506874495296680001048479411167835280842272570889636278528256990508758658587764861311215807459973582097592372198769870020215241411599860737031706203225753359339684871787907839755353559410978682155432200578903364953260155930502792845581671821043123396378155005777356057055394856942400585285778794382103892556669070037447689036888789786200482741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6a8ffa2a82fd0a6cd4bb168f3e7501031a77921
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							253c651d3f8bf83c18e8ffc0923ac4b87c5be4c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.gandi.net/contracts/fr/ssl/cps/pdf/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.gandi.net/GandiStandardSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.gandi.net/GandiStandardSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.gandi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civi-go.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civi-go.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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