vpn.archermalmo.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 08:41:43:f5:67:47:15:87:ec:4f:76:8d:68:39:5c:82 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.archermalmo.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:41:43:f5:67:47:15:87:ec:4f:76:8d:68:39:5c:82
Serial Number (int): 10972701626390242857591783656963792002
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:ef:d2:60:cf:32:99:4b:34:b3:d8:f6:65:87:e6:2b:cd:ca:04:97
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 37:33:da:f9:8f:f2:a2:a7:91:b8:82:fd:85:b1:ea:00:27:b8:4a:2d
Fingerprint (sha256): 43:31:cc:a8:87:6d:13:5b:1c:8f:b8:7c:f5:81:7e:98:99:57:8c:1d:62:64:4b:37:c0:97:1a:f0:81:9e:62:78

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate vpn.archermalmo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.archermalmo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.archermalmo.com

Other certificates including the domain name archermalmo.com

(limited to 100 certificates)
thelab.archermalmo.com
www.archermalmo.agency
inside.archermalmo.com
inside.archermalmo.com
archermalmo.agency
supremekidsschools.com
bi.archermalmo.com
inside.archermalmo.com
app.shoppingsaobernardoplaza.com.br
inside.archermalmo.com
inside.archermalmo.com
inside.archermalmo.com
archermalmo.agency
www.binarycube.in
vpn.archermalmo.com
archermalmo.com
inside.archermalmo.com
luminarlab.com
archermalmo.com
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
thelab.archermalmo.com
polaritylearning.com
www.led.money
cesarbarone.com
www.c21caribbean.com
inside.archermalmo.com
bi.archermalmo.com
inside.archermalmo.com
archermalmo.com
webvantage.archermalmo.com
archermalmo.agency
inside.archermalmo.com
archermalmo.com
archermalmo.com
inside.archermalmo.com
crystalbank.net
www.impactus.kr
archermalmo.agency
archermalmo.agency
thelab.archermalmo.com
api.img.tips
sandhurailings.ca
archermalmo.com
www.mattsxmaslist.com
agency.yumi777.com
cvguided.com
thelab.archermalmo.com
www.archermalmo.com
m-ficheinteractive.etoh.app
archermalmo.agency
archermalmo.agency
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
www.flairboat.com
metzger.cool
inside.archermalmo.com
handmade-events.eventmaster.jobs
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
vpn.archermalmo.com
www.archermalmo.agency
archermalmo.agency
inside.archermalmo.com
thelab.archermalmo.com
vpn.archermalmo.com
inside.archermalmo.com
www.archermalmo.com
bi.archermalmo.com

Certificate

The complete raw certificate details for vpn.archermalmo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10972701626390242857591783656963792002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.archermalmo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865215704320631341303238294873918555656641989575489877702249955783798276274808505337660014543934210660522843156240880232471867825231837024896093672505840943734936437810140753463523942584495050645871272134733615480770728964300966569379035227636192075510052203555154063588608521641259276537648832947026099956229114477859055004479755431560739642581260123723227398827774917691361149338701226853501104193835182017938120275906231728692513041501883227705877429348955895602185010154788856969182501572745241504414965603344379438437095390305722531290429643191954785608962833367184048613294570950571336545339330211645179593763772770814335424209369100299743902585606497844350476575296584846093052723379480460521735531072311823952568331769171697673607605297845636202482529363721908493160834328661180305336752298243429937704928614051424069496899834535826879734601697324712226057752439447906267186817589157481251300133427815411779593372914109385751459317203080715216983888926966096655683654684151342075952529975089511052317341372051835541540489927324380847889807770264730862764224920732241980982234994522923514544316305741769710242076366282095966025916808453607118588390999824733865376932342454772769739835727001068872111595632561498581480983957477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82efd260cf32994b34b3d8f66587e62bcdca0497
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.archermalmo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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