logon2.ckh.com.hk

Issued by Trusted Secure Certificate Authority DV

About this certificate

This digital certificate with serial number 46:09:ef:11:60:a7:b9:6d:aa:19:0a:01:ab:26:2b:db was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=logon2.ckh.com.hk,OU=Domain Control Validated+OU=COMODO SSL

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:09:ef:11:60:a7:b9:6d:aa:19:0a:01:ab:26:2b:db
Serial Number (int): 93097539249358287259124374621500353499
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ee:dd:64:34:06:38:09:90:3f:ea:92:55:33:7a:6a:3b:02:33:98:80
AuthorityKeyId: 04:59:49:2a:41:5b:9e:0b:23:3a:ee:e7:76:72:59:ac:3c:4c:5a:33

Fingerprint (sha1): bf:5f:11:81:f9:dd:fc:51:59:27:cd:a4:ff:86:cd:11:a8:73:6b:e7
Fingerprint (sha256): 3c:5f:3d:34:07:8b:98:13:35:9c:2b:75:01:66:c0:5e:09:db:6e:9a:f4:48:48:43:f6:62:74:ac:2b:d3:25:00

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl

Check the revocation status for certificate logon2.ckh.com.hk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logon2.ckh.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logon2.ckh.com.hk
www.logon2.ckh.com.hk

Other certificates including the domain name ckh.com.hk

(limited to 100 certificates)
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mail2.ckh.com.hk
m1.ckh.com.hk
lsweb.hwl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
emf2.ckh.com.hk
mail2.ckh.com.hk
pqmx.ckh.com.hk
sni.cloudflaressl.com
mail1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
logon2.ckh.com.hk
mail2.ckh.com.hk
sni.cloudflaressl.com
guest.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
mailgw.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
m1.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
mail2.ckh.com.hk
www.ckh.com.hk
ckh.com.hk
sni.cloudflaressl.com
logon.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
emf2.ckh.com.hk
sni.cloudflaressl.com
webmail.ckh.com.hk
sni.cloudflaressl.com
mail.hwl.com
guest.ckh.com.hk
vpn1.ckh.com.hk
guest.ckh.com.hk
*.spapps02.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk
mail1.ckh.com.hk
vpn3.ckh.com.hk
mail1.ckh.com.hk
mail.hwl.com
sni.cloudflaressl.com
mdm1.ckh.com.hk
sni.cloudflaressl.com
mailgw.ckh.com.hk
logon.ckh.com.hk
pqmx.ckh.com.hk
ckh.com.hk
mailgw.ckh.com.hk
mail1.ckh.com.hk
logon.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.ckh.com.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
logon.ckh.com.hk

Certificate

The complete raw certificate details for logon2.ckh.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviD16q22D74680tcx/zd
FNkl0dsaK/17XcmhYL5IL3uBpwrS35LplSsBsaRKbsTNnz37pCKCsbL1MdYP+COZ
ZfeJUMHoGAaimNU/3k2jD2Dtf0dF0tt14pPIAB6SjwGtEn8tx3bIhKRN+tFwUj6w
V+t+b1xEsW21lZx/k8JyF7IbXRqh5VQw4HrMg31vuPtDSLC9mT4yYsnC9AoJXSqw
JZ/ffcLlp9EgAoH8lQyeYdWPWS39/x+EYXJ0PZA0WlUl9HAX6YMlwaOyVRjqbIBV
w5FOMXAVajT05mBm9KPfYefedbpd9myFQ+hjVNhfcO8vQeW20VbOg2yJI8FP7kzy
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93097539249358287259124374621500353499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority DV'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logon2.ckh.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24001531427183177501321841600955552151967616968611317706882365348668659741804978205488185024270610856792515064694624278147860053552670586066883642052784003787152719476549888286596698968243766674609001127784414524090297772346433887896352070868127500141073460198712289889960360938137830897603020092250533711574044696118194405667108821878150270584512991558168921243169671657602618805919703787911071635084184073750672179423659051805850768257592306842616554278404301104830742555313622315988275557622933318921321231467386560285675610554307487107055134761380909395409859089984470763249126497929510564300226195071075758174727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0459492a415b9e0b233aeee7767259ac3c4c5a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eedd6434063809903fea9255337a6a3b02339880
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthorityDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthorityDV.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logon2.ckh.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logon2.ckh.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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