covenanthousetorontoevents.ca

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 5c:36:44:89:5a:8c:37:55:45:10:9c:c9:1a:2a:db:93 was issued on by Sectigo Limited.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=covenanthousetorontoevents.ca

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:36:44:89:5a:8c:37:55:45:10:9c:c9:1a:2a:db:93
Serial Number (int): 122570749728707615568667533417451805587
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 97:eb:30:d4:c8:eb:8f:26:4f:ff:69:46:1c:ff:5c:0a:30:ab:6a:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 03:6e:06:42:55:36:19:dc:98:dd:2f:d9:a6:8c:65:ab:26:3a:c6:43
Fingerprint (sha256): 34:d1:64:19:0e:d3:7b:06:cb:fb:79:a0:ea:02:76:9b:15:63:9c:fe:7d:48:52:da:ed:04:2c:90:c3:4a:38:8e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate covenanthousetorontoevents.ca

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covenanthousetorontoevents.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

covenanthousetorontoevents.ca
advanceconcordia.ca
akaraisin.com
crowdfunding.mcgill.ca
donate.ccla.org
donate.humanitariancoalition.ca
donate.oakvillehospitalfoundation.com
donate.ottawafoodbank.ca
donateoakvillehospital.com
fundraisefornygh.ca
give.orbis.org
m.supportthepmcf.ca
qa.raisin.events
raisehope.ca
secured.hope-international.com
supportmackenziehealth.ca
supportthepmcf.ca

Other certificates including the domain name covenanthousetorontoevents.ca

(limited to 100 certificates)
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com

covenanthousetorontoevents.ca

covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com

Certificate

The complete raw certificate details for covenanthousetorontoevents.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppmIivv63keVPporf66
HnHB67LKLLaDt5EJrp8OC3OiaFzpouHnqjYLpPLLmhfA0uEUGEc8oL7ACWxKw8Of
Hh8doNMgdKawZxFpiNrqaAunlAqDNDeA3cMjFwycIYxWHxQSJ40CT69e1rUkVTXi
ma377WF1f62jR6aQotWg06Qw9xpXpDDN42jvnzJcVKIpH4XbHvvBE8EfC57sn8Ao
iPs2cfxmPYahvALKIalzKJ2t/PaYmq4917RPLXwOcmABBvh4Ko4unlLiWyPUhpi3
75WbJ63a3e9R8LG35/pdVXj1iMJQqMqW9jJRj6OaZSj27UM0EeSGoA0p5c0KK7zc
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122570749728707615568667533417451805587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covenanthousetorontoevents.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051508468128501760205140336111892565828501383844638708892380235511002640525186778606097892053669106199893697436100743289862828574048665375000074969118577241303761527967972016276656550001222424608906564696232373885413873555504261582433494873310111420862423101608857443570931913436903032267616118020406102988003533610215607220036023487345024265518473660632639321605593260583669593977309537455413777833997640467059888746576833693377883798540259995236347203500091363374977577748394252791934383077901459066856618076858893678165098086450433628200945796429887421434076341618241884140343408326682087166630189376500899044473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97eb30d4c8eb8f264fff69461cff5c0a30ab6a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000183d24c3f2900000403004630440220792fcd0f78cf01a4c87ec0f4d9eb8a177141fc20f32a4d4e2b61c1dc31be12090220440cd15f05b266270841cb7d5eb7625f2b5798bb68826d653c2542a3f27352b100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000183d24c3f440000040300483046022100e4edeb19649fb779fca44791b6c16981b330a7c31b05065305f667efb4ed9411022100b626ca7fdb7039f6b09f7ea9ed977cae2adc6fcb08a755ba7933450616540228
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceconcordia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaraisin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.mcgill.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ccla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanitariancoalition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oakvillehospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ottawafoodbank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateoakvillehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraisefornygh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.raisin.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisehope.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.hope-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmackenziehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportthepmcf.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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