cstore-re.gspretail.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 8d:1c:63:2c:ab:dc:68:b2:a7:ba:c6:7c:5f:23:03:79 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cstore-re.gspretail.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 8d:1c:63:2c:ab:dc:68:b2:a7:ba:c6:7c:5f:23:03:79
Serial Number (int): 187568543215490420177524553811809731449
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4a:5c:15:fb:39:55:c0:8f:e2:b5:ac:68:ea:c7:0b:81:45:5b:ae:32
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 10:5d:ee:63:18:ec:f1:7c:fa:5e:16:9b:19:e6:db:41:3b:5f:88:a9
Fingerprint (sha256): 34:e6:89:a3:a7:3a:c8:03:72:5f:cf:c6:2e:20:7a:d1:fd:8f:16:02:fb:ab:0a:2c:16:8c:f1:b6:8e:dd:65:a2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate cstore-re.gspretail.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cstore-re.gspretail.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cstore-re.gspretail.com
www.cstore-re.gspretail.com

Other certificates including the domain name gspretail.com

(limited to 100 certificates)
itsupport.adhocteam.us
blog.gspretail.com
dedip.filesanywhere.com
dedip.filesanywhere.com
helpdesk.ytl.com
helpdesk.ytl.com
grocery-re.gspretail.com
helpdesk.aaanm.org
dedip.filesanywhere.com
servicedesk.smileservicedesk.co.uk
app.accustore.com
helpdesk.ytl.com
support.cafonline.com
helpdesk.ytl.com
dedip.filesanywhere.com
dedip.filesanywhere.com
gspretail.com
app.accustore.com
servicedesk.veritechkw.com
ithelpdesk.splashbi.com
covid.gspretail.com
ithelpdesk.splashbi.com
auto-marketing.gspretail.com
helpdesk.pcrm.org
helpdesk.ytl.com
servicedesk.tscapparel.com
dedip.filesanywhere.com
helpdesk.ytl.com
gspretail.com
specialty.gspretail.com
dedip.filesanywhere.com
portalitsuporte.griner.co.com
staging.gspretail.com
helpdesk.ytl.com
dedip.filesanywhere.com
gspretail.com
dedip.filesanywhere.com
cstore.gspretail.com
itservicedesk.inspireer.com
blog.gspretail.com
auto-marketing.gspretail.com
azure-vpn.gspretail.com
blog.gspretail.com
grocery-marketing.gspretail.com
leg.secureftp.gspretail.com
servicedesk.novasourcepower.com
helpdesk.ytl.com
secureftp.gspretail.com
blog.gspretail.com
auto.gspretail.com
dedip.filesanywhere.com
dedip.filesanywhere.com
app.accustore.com
support.cafonline.com
dedip.filesanywhere.com
grocery.gspretail.com
blog.gspretail.com
cstore-re.gspretail.com
demo.ship.gspretail.com
auto-re.gspretail.com
dedip.filesanywhere.com
auto-re.gspretail.com
helpdesk.ytl.com
dedip.filesanywhere.com
dedip.filesanywhere.com
portalitsuporte.griner.co.com
dedip.filesanywhere.com
dedip.filesanywhere.com
gspretail.com
dedip.filesanywhere.com
portalitsuporte.griner.co.com
helpdesk.ytl.com
gspretail.com
helpdesk.ytl.com
specialty.gspretail.com
dedip.filesanywhere.com
itsupport.adhocteam.us
helpdesk.ytl.com
covid.gspretail.com
grocery-re.gspretail.com
dedip.filesanywhere.com
gspretail.com
dedip.filesanywhere.com
cstore-re.gspretail.com
portalitsuporte.griner.co.com
dedip.filesanywhere.com
helpdesk.ytl.com
it-assets.gspretail.com
dedip.filesanywhere.com
dedip.filesanywhere.com
cstore.gspretail.com
support.opiant.com
servicedesk.veritechkw.com
helpdesk.ytl.com
staging.gspretail.com
dedip.filesanywhere.com
support.lrp.com
grocery-marketing.gspretail.com
dedip.filesanywhere.com
dedip.filesanywhere.com

Certificate

The complete raw certificate details for cstore-re.gspretail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187568543215490420177524553811809731449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cstore-re.gspretail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862493915793296493800412209642893631688767581622304852437939094065525601657975308403467319185556992268276444300426707912873879944726475619292606264696869178387252811830131376244670857795511128398332232517743880500499916064053949304368132608452671693279387920461900298571018371674338130552806052216509538357716995837312480812931374399048573147964099830282794268802861862624719237284544862690150884421405564985423772661760303150798967653682515673727883440638840684074918116714473300967402788071788555710747930823112267981500256501198042237170229227819574995279536644286225422594915420929074454748332702603614863341489111709711423874720518939099803591870239283993736268750801382153753176318459794101082077811802232279990731591602316206555584693680209821657565857146567029993386787383970416549467365719956772942719514091364894817074277017021468212177193270770016296075098967192550788384333146367275535677727949822113084318380887260562830247424931136328615275723903800200954078736629185760617375599196125094762684460088031532892268129052679544618267817250450377945902734766945801126608035364173242787285122384950461240590485200968212118175151924285711603227053237606610574748816595109408465462462588122765368128955362958947062399357479977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a5c15fb3955c08fe2b5ac68eac70b81455bae32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstore-re.gspretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cstore-re.gspretail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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