ir.sodic.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 10:a2:bd:e2:d9:65:84:74:2a:d2:37:73:21:c3:97:7b was issued on by Sectigo Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ir.sodic.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 10:a2:bd:e2:d9:65:84:74:2a:d2:37:73:21:c3:97:7b
Serial Number (int): 22112651371902088566029874006973454203
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: a5:95:e9:28:51:5b:3b:9d:64:fc:af:cd:8d:d2:d1:75:f8:46:57:dd
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 1c:fb:47:d4:78:5a:0a:01:f3:7d:7e:19:44:cc:ff:ec:e3:05:7c:74
Fingerprint (sha256): 3d:d9:8f:25:b0:f2:89:5f:9a:7f:31:bb:be:3c:88:1e:da:ce:55:4b:03:a6:27:d9:bb:8e:d7:19:a9:b0:42:76

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate ir.sodic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ir.sodic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ir.sodic.com

Other certificates including the domain name sodic.com

(limited to 100 certificates)
servicedesk.oiplans.com
thecube.sodic.com
mail.sodic.com
mail.sodic.com
sodic.com
sodic.com
construction-viewer.sodic.com
thecube.sodic.com
construction-viewer.sodic.com
sodic.com
login.sodic.com
community.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
sodic.com
gosmartapi.sodic.com
mail.sodic.com
construction-viewer.sodic.com
eoi.sodic.com
community.sodic.com
login.sodic.com
thecube.sodic.com
sip.sodic.com
sodic.com
sodic.com
ir.sodic.com
login.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
eprocurement.sodic.com
sodic.com
itservicedesk.sodic.com
strategy.sodic.com
community.sodic.com
construction-viewer.sodic.com
community.sodic.com
eprocurement.sodic.com
sodic.com
integration.sodic.com
sodic.com
construction-viewer.sodic.com
servicedesk.oiplans.com
construction-viewer.sodic.com
servicedesk.oiplans.com
mail.sodic.com
construction-viewer.sodic.com
sodicwebsite.kijamii-dev.com
sodic.com
servicedesk.oiplans.com
sodic.com
sodic.com
login.sodic.com
thecube.sodic.com
sodic.com
sodic.com
imagine.sodic.com
sodic.com
login.sodic.com
eprocurement-prep.sodic.com
community.sodic.com
community.sodic.com
construction-viewer.sodic.com
sodic.com
construction-viewer.sodic.com
login.sodic.com
construction-viewer.sodic.com
sodic.com
plex.signalwarrior.net
community.sodic.com
login.sodic.com
eprocurement-prep.sodic.com
thecube.sodic.com
eoiadmin.sodic.com
sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
construction-viewer.sodic.com
sodic.com
mail.sodic.com
itservicedesk.sodic.com
strategy.sodic.com
eprocurement.sodic.com
sodic.com
sodic.com
eprocurement.sodic.com
mail.sodic.com
login.sodic.com
gosmartapi.sodic.com
community.sodic.com
eoiadmin.sodic.com
construction-viewer.sodic.com
community.sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com

Certificate

The complete raw certificate details for ir.sodic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ksRLNg3JQb46tPTGlQa
LPUx3+nu1UNgTQ5IgOfvfJe8HSppCPYUwL5BbsspH4WZKD2ds0gIJrFroGaVDtDu
pI1KcsL9twG6p/Le6vAr6xBqScmiSAhUSCRDzSkKi+uQ1TIA0jAepQHDw/FVtEs9
5f/Rb5I36cDmN+v3RLJhyqrRSYcxuL4Rjta0cz/xpts8PLpjiXIondKPExN6wfzW
jLzWqCd43bf+d1tUMcrHarbQfTCGtu0KEUtJmHVH0XJz0JQgYmdCAUJ08pSSsgvN
wcuYuq5aQj2T/pD4UimGl+Sc2ZhyS96f+KcZhQ/8g4WLbJAo9xZE200PTVBJXLUC
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22112651371902088566029874006973454203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ir.sodic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29576780324036248134468425152035909553791024320133319657067887203904274606840668239500245132857131014499658943799873105380152060077679093027448764051087615520286399836949200855814822913583422406588023241462283378864798766281201923966432428048272626018724988186388833882992202427320109847184173878006346591878937531527187828761259575286754777502714106210575500094775416497499481020200364730712342200438984740448230442973719534092367328025000853679528006512092781366993814688731113313738616077573489905501769892855849417749304781843105962232605032243413617978969053567304452489431451627233732381081420533825801913959111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a595e928515b3b9d64fcafcd8dd2d175f84657dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sodic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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