*.eck.io

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 3a:b1:e7:d5:f0:ce:75:ec:fc:b0:ce:fa:97:3e:89:e9 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.eck.io,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:b1:e7:d5:f0:ce:75:ec:fc:b0:ce:fa:97:3e:89:e9
Serial Number (int): 78018962486228842157324354703455062505
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 34:6a:58:be:b3:57:ac:8f:5f:3d:e6:9d:33:39:6f:da:17:50:be:de
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): cd:f1:78:b5:65:8b:eb:9c:a6:32:32:9e:e3:0d:98:1a:65:3b:27:cb
Fingerprint (sha256): 3a:dd:47:ea:44:b8:e7:b7:39:bf:8d:ef:26:94:ba:91:60:3b:00:81:29:07:2a:ab:88:27:f4:59:e7:73:13:9c

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate *.eck.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eck.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eck.io
eck.io

Other certificates including the domain name eck.io

(limited to 100 certificates)
ikurs.biz
jacob-hudson.com
test.gasuga.com.br
rod.eck.io
eck.io
eck.io
free.update.jp
accordle.com
rodo.lpho.de
www.asalpay.com
eck.io
eck.io
music-lyrics.treisyjimenezvega.com
*.eck.io
www.eck.io
test-tickets.roobixapp.com
ptt.tw-bbs.cc
eck.io
www.loverfighter.app
eck.io
dev.conform.app
www.20191222.love
cameratabellisomi.com.ar
www.everycademy-staging.com
ironview.com
iflex-thailand.solvay.com
gutschan.com
eckhardt.com.br
www.rachsmith.com
jeffshin.com
beta-admin.shl.ist
mattgoodrichapps.com
admin.mojlek.com.pl
www.villaasu.com
www.buddhawisdom.app
avantec.io
naike.pe
souvenir-app.com
coinage.maui.at
wello.in
mail.laplayahostel.com
noteio.tk
app.sundaymorning.co.in
rod.eck.io
eck.io
benjaminlane.co

Certificate

The complete raw certificate details for *.eck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78018962486228842157324354703455062505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.eck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817358401786866455911099662112498077216787414887569004231840879626647680651279852980050563912594119512819062472732886051624406999606652531156770800317216784036110005760287539222200186166780760682148162224405997162124534917485091260742397650693150582472437589560007753265431662607027359076643206127896348073141029384017710619807133016949041926309050916251363815550081609347271697382846805943449468923789846244118115012756274762507287563823056449404762393619713655013615104506428522548204167905182742584729939470799618202405317446465994223845111601047028994571698347864851473099912476817536253619778315994426078850436356235432171574443224049684281767359214651802791301161619435836736125043623790749505849564270346439252121667392718181297836155876034392302109278616020617076892016795283580600704355406958408231340868415132089191896812703116257919172748483039193028412747472544277070621745512702907321491831587377759741546997078478857716407040588761940535883280334517294793597288127429422687633497698296625420755634600435981741087450839543098863478533367719226904842369515470971450688633234411579669372883128396546865732648913576339056538628068008791670810816834442675687596961952723611890581435534402616708093993791979265360301870027669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							346a58beb357ac8f5f3de69d33396fda1750bede
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eck.io'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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