myco.dica.gov.mm

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:19:a3:ba:34:30:ee:ee:3e:c7:79:1e:45:e9:85:45 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=myco.dica.gov.mm

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:a3:ba:34:30:ee:ee:3e:c7:79:1e:45:e9:85:45
Serial Number (int): 4120812194174118452993755204360439109
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 6b:26:1f:2f:54:4d:dc:50:ab:67:53:44:b5:aa:d4:ea:04:62:a9:b6
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 64:14:31:fc:95:b4:1d:c5:0f:30:9a:b1:77:e6:79:02:92:36:a4:30
Fingerprint (sha256): 45:33:7e:cb:b1:39:8e:6b:72:5c:f0:66:cf:0a:3c:66:14:67:11:fe:77:4b:d2:fd:2d:ae:cb:e8:c1:db:24:21

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate myco.dica.gov.mm

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myco.dica.gov.mm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myco.dica.gov.mm

Other certificates including the domain name dica.gov.mm

(limited to 100 certificates)
myco.dica.gov.mm
*.dica.gov.mm
bo.dica.gov.mm
yadis.io
dica.gov.mm
www.stemhubonline.com
viilu.tv
dnamobileapplications.ca
villaart.com.ar
bo.dica.gov.mm
bo.dica.gov.mm
test.clasificados.elheraldodechihuahua.com.mx
boadmin.dica.gov.mm
visaonline.dica.gov.mm
delhigrillkl.com
visaonline.dica.gov.mm
bo.dica.gov.mm
boadmin.dica.gov.mm
boadmin.dica.gov.mm
myco.dica.gov.mm
tagglish.com
yourdrinks.bar
boadmin.dica.gov.mm
visaonline.dica.gov.mm
dica.gov.mm
dica.gov.mm
iainandpaul.com
www.shopai.company
kria.io
giftdibs.com
sni.cloudflaressl.com
www.sellfons.com
boadmin.dica.gov.mm
dica.gov.mm
cashapplication.liberte-mode.com
www.circlebatch.com
boadmin.dica.gov.mm
dica.gov.mm
visaonline.dica.gov.mm
dica.gov.mm
developer.doc.foxar.fr
www.dashboardevaluations.com
tagioo.co.il
dica.gov.mm
mymeetings.aniline.io
www.bestotaxi.com
boadmin.dica.gov.mm
www.hello10.com
dica.gov.mm
dica.gov.mm
visaonline.dica.gov.mm
365go.in
bosqladmin.dica.gov.mm
legacy.quiltdata.com
saintschool.graspsoftwaresolutions.com
bo.dica.gov.mm
bosqladmin.dica.gov.mm
yadis.io
bo.dica.gov.mm
www.apy.app
dica.gov.mm
bosqladmin.dica.gov.mm
fire.bigbears.io
tagglish.com
crmmadesimple.net
visaonline.dica.gov.mm
myco.dica.gov.mm
sni.cloudflaressl.com
qr.igua.pe
bosqladmin.dica.gov.mm
jjplusplus.com
bo.dica.gov.mm
dica.gov.mm
bo.dica.gov.mm
alpha.jathil.com
visaonline.dica.gov.mm
myco.dica.gov.mm
www.myco.dica.gov.mm
dica.gov.mm
sni.cloudflaressl.com
bo.dica.gov.mm
pakito.pliss.es
www.canadianhomebuyersguide.ca
dica.gov.mm
boadmin.dica.gov.mm
visaonline.dica.gov.mm
crmmadesimple.net
visaonline.dica.gov.mm
myco.dica.gov.mm
vollkorn.games
myco.dica.gov.mm
www.myco.dica.gov.mm
bo.dica.gov.mm
visaonline.dica.gov.mm
dica.gov.mm
dica.gov.mm
www.dorita.gallery
www.apy.app
freie-traurednerin-dueren.de
bo.dica.gov.mm

Certificate

The complete raw certificate details for myco.dica.gov.mm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/+qnMyUX+/kqv8PIdfc
IgwBN3qzk7EYYUmrEZ+8isfsKQ6pQr4BJCC1AXNSvAkLJyNxHNeKCQ+maRv87T0X
hWR2TrEPDt22odOtDe/JWn+0m5g/PTvLvD1d/vSc7a+o6o1g6RWztED35cHkT8xc
ID0nZ6CPRvl2zPM6UdAE03I+ptgnSkaVfrldQU553kAIMp6BIg8x3FT7n2YEsI75
39fDKCrVfTuKVkyaVCCOGE4MxBBv5MQmviEyIQh4Lvb2eJFjVH4ZMUkol02SoZsA
kPj2mpuj4nEBkY0qpuaTrxhvC1BS6kGsm/FsFHR3GF37yf3U4L/k422JXrjitIdM
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4120812194174118452993755204360439109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myco.dica.gov.mm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21712823977024481485253350624287106618302937368116235461396092085710651515177418291425447081762071746439437203582435126383942301400846315648709940178206551143519051941463522317776173630602368945621637898517351640076017958741045450989470087258198688302442105922633253000252275040507662429540177979381719473272243247383617846704183900837544175727641021763620744464489321744754491286517647039287585814574711754442505191240999238371885621085624171946640991866126866394456137189081622758119554246161034722515927009114037628774435733046682193250000735343362020083623304566670893360952574858916820814265382921369567399201897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b261f2f544ddc50ab675344b5aad4ea0462a9b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myco.dica.gov.mm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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