*.miraclesoft.com

- MIRACLE SOFTWARE SYSTEMS, INC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:ba:3e:e5:53:76:ef:d6:ca:d8:52:b5:d8:4f:8d:fd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MIRACLE SOFTWARE SYSTEMS, INC

Organization: MIRACLE SOFTWARE SYSTEMS, INC
State / Province: Michigan
Locality: Novi
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ba:3e:e5:53:76:ef:d6:ca:d8:52:b5:d8:4f:8d:fd
Serial Number (int): 14259322852012320507739664668607614461
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 12:3d:4c:e2:8c:3a:60:ae:57:91:6a:18:a0:43:3a:40:ef:4e:b7:f9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 66:c1:71:2d:b1:df:5a:92:6d:2f:6e:4d:35:7e:eb:74:55:bb:32:37
Fingerprint (sha256): 31:2f:d7:90:c7:f0:53:c3:59:e3:fe:75:8f:54:96:e3:53:25:02:77:34:3f:73:61:7d:7b:50:16:73:ab:e2:ed

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.miraclesoft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.miraclesoft.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.miraclesoft.com

Other certificates including the domain name miraclesoft.com

(limited to 100 certificates)
*.miraclesoft.com
univ.qiyoapps.com
sw.app.ignates.com
garciamonterde.es
nm-develop.de
www.sidekick.management
ekadtepi.com
bitstec.bitsbo.com
bootware.jp
status.miraclesoft.com
mail.miraclesoft.com
dailybreadapp.com
www.toxapedia.com
sfet.in
mars.miraclesoft.com
meerkat.dev.zoocommerce.tech
www.squeeeezed.com
doc-convert.miraclesoft.com
jooish.app
help.miraclesoft.com
register.fishfacts.com
albertodenatale.com
everyday-works.com
*.miraclesoft.com
www.miraclesoft.com
www.sonacollection.in
portal.sociusco.com
cms.zsottu.hu
lebom.dev.cacango.com
saiasqueamo.com.br
*.miraclesoft.com
id.auth.au.psithur.app
www.commsbylevels.com
kiosk.michaelewen.com
crypto.gomri.fr
www.tegnespillet.no
app.uottahack.ca
boards.amitco.info
*.miraclesoft.com
dhruvdhawan.com
*.miraclesoft.com
ndaby.club
dancosolutions.net
www.qream.app
*.miraclesoft.com
*.miraclesoft.com
www.dharmeshdhabliya.com
*.miraclesoft.com
recruiter.miraclesoft.com
api.dragonereum.io
sashagoldberg.com
*.miraclesoft.com
boemyo.com
www.miraclesoft.com
gustavo-mattey.chevere.tech
siso.miraclesoft.com
dizkount.com
my.dev.norby.live
anvatara.africa
codigo.turnosweb.app
learn.nixonsucuc.com
mail.miraclesoft.com
www.appreasy.io
danielleteixeira.com.br
me.miraclesoft.com
dyn.bantoa.com
tryrival.com
www.evbenchmark.com
covid19.miraclesoft.com
redencaorock.com.br
www.timeloggerapp.com
*.miraclesoft.com
assessmentreferral.com
api.platypussecurity.com
fa.ayukawayen.net
spacesapp.zang.io
mediocremelodies.com
mail.miraclesoft.com
deadlift.app
login.everyfax.com
www.pleasedto.com
helpdesk.miraclesoft.com
mail.miraclesoft.com
*.miraclesoft.com
macaulaybusinessclub.com
fhub.frantic.com
www.know-it-all.io
me.miraclesoft.com
www.spaziolaboratorio.com.br
fireflyratings.com
map.miraclesoft.com
peachy.audio
*.miraclesoft.com
*.miraclesoft.com
tom.miraclesoft.com
link.homing.com
comunidadcep.com.ar
paragonatlas.com
mars.miraclesoft.com
www.cammsroadvet.com.au

Certificate

The complete raw certificate details for *.miraclesoft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK4EJMWNnoeBtayU1jVm
vS6As7anogkvjBh0XkfkcPoIHYXR7yHFyJF9QGkkdTwnWnDuY+KtObewaX9JFQY8
VTT0UqpM/GPon4e5X7M3BY04nHnDdAC1TG4XusVjkXa6P3rkZWstf4U5OzHPoRWw
cZDqRZ4794onVs1lkq8ZceBARmimmfyJCf3gq82oC+soSp0XAMwD9SR9uKxU7Nxk
zRKawBmHFlMQekPO5HWnQModUBOS7GgrQWcSDeNcmSDTE9A33VlaK2zNM6aC10Le
beqQyPnqtEazgBpxh6k9nfIHYKzXdm4C2wCR0CT94VlA7wcrtX3lFTCRQkLWwmu4
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14259322852012320507739664668607614461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIRACLE SOFTWARE SYSTEMS, INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.miraclesoft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333471572777538909619405198033787819934006212068215874835831606711849145571386760744027863070305465460473112902769597824075250731662722772720847999297724771146433745972634033880669981863245729999081371265065998691881927000197994146969333345024439338366962137622541326701363153160850659518844828773638038446682197706655691506566843944297156664829280035572938839805242438534160616862721485416709149349595089743011864968193446255963520576254911448353199569008495980680661455584017646181712142121532971604212846717845667159247536572361713833111725231314765015039415669654683316023253312243269449788652752608653692614753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							123d4ce28c3a60ae57916a18a0433a40ef4eb7f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miraclesoft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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