performancesoft.org

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 03:cf:54:28:c6:83:74:d1:54:12:86:20:25:74:b6:1d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=performancesoft.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:54:28:c6:83:74:d1:54:12:86:20:25:74:b6:1d
Serial Number (int): 5064196390041617131641765466782086685
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 48:7a:ef:88:9f:4c:c8:19:5f:fa:dd:ab:a5:60:a1:00:fa:b4:c4:5e
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 6d:ed:0b:6b:51:8e:d8:37:46:bc:16:33:24:7f:6a:16:30:a1:45:0d
Fingerprint (sha256): 34:b3:74:fb:59:58:d8:69:92:f6:84:cf:9c:2f:07:74:c5:e1:86:b9:3d:c2:a3:99:9f:e0:9f:20:d7:d1:85:dd

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate performancesoft.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for performancesoft.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

performancesoft.org
www.performancesoft.org

Other certificates including the domain name performancesoft.org

(limited to 100 certificates)
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org

Certificate

The complete raw certificate details for performancesoft.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp40j4w/U5jQiSOb0Mvzo
ZGXNcHsLR/BsielKxYYnptuBB59/fFZQ8SLB2QRei9AZ43RxPdB6MH0+i9Rjn3gh
wRRgsz6SQtbsspdpnxWLvdWMSZoVIQQCBnFktxQGe9TpalNuKUC/2TRm29AXrZlh
J2FRwcoUjzXZLSnlw03ZXkWzIrLsArh7hyTei7wpA6ORvK6sW4hzkSKYM9zIu27b
m0y9aZ20JSdR7q0i0Or0CTagboV+nt90UuJ6i0Fy1NSC7sp5AWI8LxE/aVBn3m3/
eGUBJ0lQUltk4D5jPPfpmoIo00DcadCbkdzSq2E+h9hKDF5b7BzQRi1f2WUruz4X
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5064196390041617131641765466782086685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'performancesoft.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21151395747768927330717472353682559152665510665455995688585696666199242636324027913322831231293542518106431575097605245427408677666150142082932844925175111596218069020433145341306662951920646330212536267510313287220007855711667003965259749277534912521606830607513489828930960717726390951832607935621955023920885525258715134036392635323279939315189886055125412607862828696273025303601219783363071663970182308848626814737925736602114164942709780128796796459516586830310450999453723690965283362647075079003082188354623759765507858764151724625756653714408468029690093365273950698946393552212531793298779141245043006641947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							487aef889f4cc8195ffaddaba560a100fab4c45e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancesoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performancesoft.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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