sunseasolutions.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:29:32:e5:37:62:51:01:a4:37:22:8a:85:fe:b6:f3 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sunseasolutions.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:29:32:e5:37:62:51:01:a4:37:22:8a:85:fe:b6:f3
Serial Number (int): 16164652401488849570130974835235272435
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:c2:3a:e0:51:33:d2:37:f3:f5:8b:bf:77:94:85:84:91:b8:90:75
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 00:47:8e:e8:c6:78:11:e3:b5:c0:99:54:00:71:d8:76:be:b9:bd:7c
Fingerprint (sha256): 37:0c:98:b1:2b:2e:06:17:3f:59:24:b9:47:02:2d:c4:03:44:d5:f3:c6:a7:d4:44:e5:09:51:0f:de:24:42:91

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate sunseasolutions.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sunseasolutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sunseasolutions.com

Other certificates including the domain name sunseasolutions.com

(limited to 100 certificates)
sunseasolutions.com
client.albumhealth.com
mylocalshop.sunseasolutions.com
www.zipplog.ca
mylocalshop.sunseasolutions.com
mylocalshop.sunseasolutions.com
notes.sunseasolutions.com
mylocalshop.sunseasolutions.com
notes.sunseasolutions.com
luckeylogic.com
dashboards.kyascenehai.co.in
notes.sunseasolutions.com
drzein.com
sunseasolutions.com
rentsngo.com
sunseasolutions.com
sunseasolutions.com
sunseasolutions.com
ateliers.stack-labs.com
notes.sunseasolutions.com
speedyconsulting.com.br
notes.sunseasolutions.com
dev1.shop.verda.ca
wt-navi.com
travel.abank.com.br
sunseasolutions.com
www.bhavishyam.in
pejme.raubas.se
mylocalshop.sunseasolutions.com
sunseasolutions.com
rinkeby.zen-art.app
suziephan.com
sunseasolutions.com
app.lapp.wearemusicos.com
sunseasolutions.com
sunseasolutions.com
notes.sunseasolutions.com
sunseasolutions.com
googleauthenticatation.com
sunseasolutions.com
wilson.besafe.school
notes.sunseasolutions.com
www.nitroventures.de
trycsb.com
zacharyinserra.com
www.calendas.net
manage.fufu.be
ten-x.dev
mylocalshop.sunseasolutions.com
notes.sunseasolutions.com
notes.sunseasolutions.com
delivery.tiffinshare.com
1234search.com
sunseasolutions.com
mylocalshop.sunseasolutions.com
vizboard.vizlab.cc
delivery.tiffinshare.com
www.fridaytechlabs.com
mylocalshop.sunseasolutions.com
docentesocial.org
snipstory.be
fikzax.com
www.kafka.academy
ndute.tk
mylocalshop.sunseasolutions.com
sunseasolutions.com
midikitchen.com
sunseasolutions.com

Certificate

The complete raw certificate details for sunseasolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwRMxLum40uIoKJsBPGq
ty10kcj66c4pqcQ6u5lwJtiXZjHyDyi1kJX1lXVC2Z+g4YkoW0CCFnJgWIy2Y7k/
HpRAv19oAWULUcIr6aKSivtycPZitiMJfrzyvnw2KHfW0VxHsRFPpXhh8jBjVxoV
RLaZrgaQWtQ1mYgOs3ryUOv8KgYsbdIGPfHe6N7uFAOaziCJkqCq5PeQ/z/HxqLI
fNNkgP6qIRtoibwBXSZobiC2KORynEmrPSSxNeff+t/N4+xUda/+M+xGNony6hGP
lymEU7hI+UDb54LIXd/emX+V2Z+2aBsx2xwD0/MexCnIi6eCXK2wQLxUawT2/XeK
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16164652401488849570130974835235272435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sunseasolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21588870497525617290974070996699528097724324922308320942198237556954065556166063822430080003275976984997526408367948917347749354577193312903219902798441362853110306026469480793445428210293656998342382056688495931997755927383791469345632799351596917264533207316825133937869529606648427229626841522496783556775508437512505261917176488890041207087213165997546863656071239502453003569144824335019704140618036139853138783548162733391761361461463712451426422518798825472054497192330255941343183407899320207363565268230859775363390281302307186778720419157963334950944805036847202795799406392449806913032845303265045593426597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8c23ae05133d237f3f58bbf7794858491b89075
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunseasolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d53a19f4700000403004730450221008f5720c57e11bb9bf78148776e53ddf1b82a5af616dbea78c4d0fb54423dc43c022029fb47273ff24c4c97fe86c08bbc982c3f8d25984846418c50ee00d9a549333900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d53a19f20000004030047304502202b6d0806ad31ab05131b0eafe2eaca2442c7c7ddd8a98036e606071a9482b75602210099610494ca7195948a9311c950f8bea649d1d472f7f54ac17d1f1ff52ef4296d007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d53a19f27000004030046304402204393125bf04764a4057f596d38eced46b4f9aaa27dbd209131b447e3c155c85202200b84fd70446f17d22db210f68e81f22b35f388b3137abc401af17a68678c85e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00b6e744b37812d2efa83902fca0c2b0504903cd8b34f248dbd723d45ceb74c76c533a8248431a9790e586f7dfb0088720ae1b81050f586413432b2a5814401ab3ad807953342135c0c8af2aeb6955237e060ef540cf26b36209cb8312c81b81269745374990bdeb367a4736917679fdc5096345028c36a135253b5585eaf01f5b8d336a3fa04876d83a1cf8e09dda9dbf0fb3197271bb543fd3cba54407595653298760b79119f143468ffd8f65302b6f149f8697eb55ebe89cf12a1920012456057f0c45ed509d986c2c375f85a97d8f947f1e06443e5f77240a4b709628865da2bcdae9243bf10d1563542cb7446a92913db40447c1d6811839df3ea2a880534fe062fe9cc356cc4cf20f37079c381776acecfce9855ee94bf4fd829e5859e316d5b880e7a2a7815004f1e329a13328ebfa5d45c29caeaa3de4448eb481fc53e991e302faa154bee6024a1fa2ef69e407ae8c783e850866a65b46e78c2ac9e575992a219afb3e7accfefa7b7567214b975fee50cd0067b9eea1ea9da0ddf56f71ea6245f72e0230d81e2a663c979ae82e9f9faed8275a87e27f8332e07b9cd681e3e7fc0e859984211d6f883259eeb62cb5028a15e31e26389fc4966d864b9afff9bd2f821f08d8dcc7e853228d119e966dff0747645708370914244b11fc243aee62c4a0c96d0117453556c8a2ac14a3220e26363e3e177b0ea19e1e0867f6