*.sp.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 55:8c:ee:e1:a9:a2:77:8e:44:89:d7:ed:ef:9e:94:95 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sp.nl,OU=Domain Control Validated+OU=PositiveSSL Multi-Domain

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 55:8c:ee:e1:a9:a2:77:8e:44:89:d7:ed:ef:9e:94:95
Serial Number (int): 113716146294234337100427449981757985941
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 51:a5:45:54:2c:b1:62:05:5e:e0:1f:c7:2e:1f:0e:d3:90:7d:de:9f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 23:72:c7:36:2d:6e:a7:1a:63:0b:e0:d5:ca:7f:cd:af:5f:02:03:02
Fingerprint (sha256): 37:0c:03:6a:86:38:f8:44:99:8d:70:73:85:72:aa:70:b6:6f:d3:07:28:c9:ed:a2:95:4a:83:c8:f4:b6:f3:d2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.sp.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sp.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sp.nl
sp.nl

Other certificates including the domain name sp.nl

(limited to 100 certificates)
cs.enwit.co.jp
lists.sp.nl
survey.tech-titan.com
vragenlijst.teambuildr.nl
survey.thesocialelement.agency
*.sp.nl
survey.cra.gov.qa
vragen.sp.nl
survey.fbgfoodtours.com
survey.bubu-mitsuoka.com
survey.stresertintegrated.com
*.sp.nl
survey.scm.jobs
vragen.sp.nl
survey.tech-titan.com
survey.epsight.fr
survey.bubu-mitsuoka.com
ankieta.quantumplanet.pl
*.sp.nl
survey.bubu-mitsuoka.com
survey.tech-titan.com
survey.ncauk.org
spork.sp.nl
survey.webworktools.com
survey.webworktools.com
survey.altiumleadership.com
survey.aeccglobal.com
survey.bubu-mitsuoka.com
survey.scm.jobs
feedback.zweihorn.org
*.sp.nl
survey.cra.gov.qa
survey.maratheartstudio.com
*.sp.nl
survey.hhm.nl
survey.rango.net
survey.bubu-mitsuoka.com
survey.dmenterprise.net
survey.scm.jobs
ankieta.quantumplanet.pl
survey.bubu-mitsuoka.com
*.sp.nl
survey.stresertintegrated.com
survey.accelapps.cz
survey.tech-titan.com
survey.gotbit.io
survey.cra.gov.qa
encuestas.impargrupo.com
survey.bubu-mitsuoka.com
cs.enwit.co.jp
rood.sp.nl
survey.scm.jobs
survey.binary-nexus.com
survey.bubu-mitsuoka.com
feedback.cetas-healthcare.com
info.colegiomontessori.com
feedback.zweihorn.org
encuestas.mengual.com
survey.bubu-mitsuoka.com
ankieta.quantumplanet.pl
survey.generation-y.net
survey.diamondpigs.com
*.sp.nl
ankieta.quantumplanet.pl
survey.gotbit.io
survey.swiss-as.com
survey.bubu-mitsuoka.com
*.sp.nl
feedback.topinsure.ie
*.sp.nl
survey.micheledicosmo.com
survey.bubu-mitsuoka.com
survey.bubu-mitsuoka.com
survey.siredsociety.org
feedback.cetas-healthcare.com
spork.sp.nl
cs.enwit.co.jp
survey.brandoorllc.com
feedback.zweihorn.org
survey.bubu-mitsuoka.com
survey.webworktools.com
cs.enwit.co.jp
survey.virtualpethub.com
ankieta.quantumplanet.pl
ankieta.quantumplanet.pl
vragen.sp.nl
survey.altiumleadership.com
events.kostyakimlat.com
spork.sp.nl
survey.binary-nexus.com
survey.fbgfoodtours.com
spork.sp.nl
ankieta.quantumplanet.pl
survey.bubu-mitsuoka.com
survey.simfoni.com
survey.matrixbooking.com
survey.hrsmartsolutions.co.uk
form.dairylane.ca
survey.cra.gov.qa
feedback.cetas-healthcare.com

Certificate

The complete raw certificate details for *.sp.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kMTVTuZyfYlWTK8HQ2
5b0QNk4AQ7/yVXyVD7TDRYArBUHDVh3Jt9B3QF0PM4HvgbkUOQArYa62tNShja7G
x+erAstF9CqV/apaq6GaCPi9fdh6wh+CSWn9n4+gLEhniw9wrDcOFvGzmwE0bi5+
bHp37PvdVnbHwc8lfWT1rZ0qhNvFP6JUH970d37hTDGIcv2KRmyUVz9R05DLO0Q5
dMquH5NtQj+xnlFwTh5Yil6JQFvdOOiHK3p6rhJn8haCjpoY9WpBeecqEEjfZuzO
Nkks2XNCMTv1v97uenJe3t+gju7FNrtEIuJClPw2TDhEDF12pd++XUdFR2I3rezI
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113716146294234337100427449981757985941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sp.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23208640193780908531862597629419164903150077327605429199207200987611832448191861331934014158502636953388417879732104546405775492396803315407905424399225393757688475516388421209676294253116591674756457673305790955125468191241230516800292416081006361065716698308825774774998045662715959431536801016935392609516386393237240048411624262636404201864678548756786325873257234664085883914496986014562993834814006994964857758025794715575993573390869497573472234201559178890569579821003258278356010997568304591042508518628453288189895026074733146846431866163290507270795457930239800888363541245351652371832262755772097364805747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51a545542cb162055ee01fc72e1f0ed3907dde9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016d95b88687000004030046304402205c550836a6cdf0f4617bd5db24906543626a17ffde76646b2536716c74b243ff0220518ba2640e4b6bca6ee6ff7d1ad462229b855ab95592e0ffa4516cf1c55840690076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d95b886700000040300473045022100d843bac8420cadd11de4ce3379ed7e3e94bc79b64b98bda20395c846a69d7420022057df409285448801c30ade84cde4b160682b5254d09a550ff7ba85645338b2fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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