www.magentammt.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 62:ba:51:f4:59:47:05:6d:63:9a:27:2f:71:17:e6:36 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.magentammt.nl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 62:ba:51:f4:59:47:05:6d:63:9a:27:2f:71:17:e6:36
Serial Number (int): 131231773037088807986279436988146247222
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8e:9e:1b:a8:9a:fe:66:05:a2:12:00:b3:0e:bb:9a:1f:86:de:45:40
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a9:09:18:d5:70:dc:34:6e:b9:63:42:3c:bc:35:81:a3:84:dc:1f:96
Fingerprint (sha256): 3c:01:97:5d:ca:1d:ba:40:21:90:56:3e:f2:25:d2:1d:8d:e7:00:7f:03:7d:85:33:25:b9:38:7e:42:98:e7:91

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.magentammt.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magentammt.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.magentammt.nl
magentammt.nl

Other certificates including the domain name magentammt.nl

(limited to 100 certificates)
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
www.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
fdus-27.freshdesk.com
www.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
helpdesk.magentammt.nl
fdus-27.freshdesk.com
helpdesk.magentammt.nl
www.magentammt.nl
fdus-27.freshdesk.com
fdus-27.freshdesk.com
helpdesk.magentammt.nl
fdus-27.freshdesk.com

Certificate

The complete raw certificate details for www.magentammt.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ZtftXQy5qBEuGEnHN9
dlxin+6xCgIWBIrj5eqzwp8ZWguKIXHjkW/mWMg9rIgCpOxCMAtZmGMYF/GAhlNV
pcTClqe9wMhn3BZ4P93MpKE/q7zaocCmSkMQPZ9L+8xFv4VB4fB+MhUopTOUrNwZ
6WCAWSgR6yNGFafhfdHQcSP88jRHlhROx8RRV/bkmquRFrqsa3w0yUgrNAfUWg/D
Ta1yKXHp05KP+VPGel1zmfDG4cZbYG8UFuOAizoBR4g0ZtdGurfksHMVRO/TrXju
9F9mQnnA/7bFa8DDh4eheLXhQFHWR//x7W3/LLyGSqAzNi+oMgJJ2Nj7x69bByQG
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131231773037088807986279436988146247222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magentammt.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22718174625020081949294605238514532906200120696444666638381345233462855650619492338783895410234687988411106437604762519570055985813885371932902791004507161418380651534525343880705382603413206142751854331688279695498742777788198994525590451240321062135712131418722970183429904281308027206858209889815644744733380115562591697391330124022536015843231868549210199412744473991493754120424744342382908542361397372133892165625725073578773828955479379066071009987793735242557016312345109712801648385265732952408444299455266205492641861509970078280357633202188741071537401471404335103501965562921812658952185817170473113617953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e9e1ba89afe6605a21200b30ebb9a1f86de4540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magentammt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentammt.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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