*.piknship.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a3:25:91:b4:73:d5:b3:11:2d:17:33:f4:75:91:9a:6f was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.piknship.com,OU=Domain Control Validated+OU=EssentialSSL Wildcard

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a3:25:91:b4:73:d5:b3:11:2d:17:33:f4:75:91:9a:6f
Serial Number (int): 216859233543017980914845222997551323759
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0f:d5:d1:d5:fb:5d:da:fa:de:a7:e2:e5:81:1d:41:9c:71:d4:72:45
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a5:0f:00:10:77:0a:5e:7d:59:b4:47:af:71:67:37:5d:c4:09:63:04
Fingerprint (sha256): 34:66:32:ef:83:bd:25:41:e4:04:4b:d4:8b:cf:31:dd:b2:84:c4:1a:22:39:43:d1:ff:d1:97:d7:5f:e0:11:86

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.piknship.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.piknship.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.piknship.com
piknship.com

Other certificates including the domain name piknship.com

(limited to 100 certificates)
support.adviserly.com
baerbel-panther.de
*.piknship.com
support.inxeption.com
app.ubuyfirst.com
support.inxeption.com
support.spacetabloid.com
support.davinstone.com
www.chowgrabber.com
navigation.startrip.link
internal-support.arisoftglobal.com
support.businessdna.technology
support.davinstone.com
advantagehelp.bakertilly.com
help.pricinglab.com
support.coscreen.co
support.davinstone.com
*.piknship.com
store.casttalk.me
support.inxeption.com
myriade.io
maisbonusassim.com.br
www.manoz.xyz
support.inxeption.com
www.jangbi8.com
www.okdsc.com
*.piknship.com
ayu-rashmi.com
support.inxeption.com
www.fhirnative.com
shop.designeways.com
share.findyourspace.co
ezlease.me
share.findyourspace.co
special-site.digitalstore.jp
*.piknship.com
asamblea.infinitics.net
www.piknship.com
www.ecommerce-solution.co.th
support.alphatech.technology
www.bnndev.com
shop-admin.fastme.net
helpdesk.yellowpages.com.tr
support.cd2learning.com
mscout.mavenwe.com
connorkerns.com
www.autaknow.com
www.myresearchexperience.co.uk
app.finishfactory.in
www.autaknow.com
help.carket.co.uk
trainslot.com
support.wsi-llc.com
support.davinstone.com
*.piknship.com
*.piknship.com
support.inxeption.com
www.talaythai.com
unitedmoverskk.com
appointment.play.medeintegra.app
special-site.digitalstore.jp
sensation-gap.com
agent.oipcsp.in
support.davinstone.com
adel-progressus.farmacare.dev
www.appres.org
support.inxeption.com
rajasthanpipe.com
freightforwarder.piknship.com
piknship.com
www.talaythai.com
support.davinstone.com
support.inxeption.com
*.piknship.com
carselandrestaurant.com
najad.estore.business
support.wcad.org
www.bookarq.com
chunet.org
support.davinstone.com
www.psgimpex.com
earclubnft.com

Certificate

The complete raw certificate details for *.piknship.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL5n0+QsTU/D9ysjDAl1
zQX5uWHcMHZuyiMMW3vux6s9gnhlRiNj+3H/Zn9AUGV9lXGDojqNKbEznTOlcwj9
y9I5z2Hc4RVoREcAPNEhTTNdlq5bWguNaTDzF/KRc4hvBZSigTybckw4bXaa1f+4
Y2CQk3kN5AA3txFtPk7/QtxHEoe25T2NN64bBWwuGqGNC1+Wto/j9rfkbhjGXUIr
ogyWPwenS20Zas2pVH5+z7t5tKdH0Xxy88wRMRXkagARlRe5DM1xRaYkFhq2/1ps
umTdcRGoVWl2c4TtTmiv1dwXqdljb6L/I/Uznfz6Atj1OuYd0T5/cKe0q03/AvdG
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216859233543017980914845222997551323759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.piknship.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22816787383307901529918293121008164508735421158866161738389609932614185008790718972375540541075493674980774528387626517420942106845600048779056180436168956687645168596146543798584082164752188521567087105753813332569063715680521843810610850885215433706800367455861826344805604867891862499611905652710055245320910104589163979086417461688483933472034420619313487710355534835345150783682196258900967128630374240362586082567111083920954094680669840084140601659304386108040837473728770679322805146377006777764779796849333508297254181591529761747766675171760178612080687845752340583741509485756828521946153856442374320244229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fd5d1d5fb5ddafadea7e2e5811d419c71d47245
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piknship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piknship.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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