*.cyberlink.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:ce:ad:13:71:ab:0c:d9:c1:c7:11:27:b1:93:32:68 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.cyberlink.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:ce:ad:13:71:ab:0c:d9:c1:c7:11:27:b1:93:32:68
Serial Number (int): 13036175512297529967887803755506381416
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:5a:03:2f:62:0c:10:90:06:14:f6:6d:1c:1c:d1:99:fc:1e:2d:0a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 30:cb:a0:e4:4d:60:c8:aa:f2:ec:b7:a5:15:46:0d:85:6a:bd:48:a1
Fingerprint (sha256): 46:67:b9:67:6f:e1:0a:1c:28:02:ef:f5:e7:f9:31:d1:de:88:3c:b1:d5:a3:f9:f0:aa:54:15:a2:c3:e4:f7:4d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.cyberlink.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cyberlink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cyberlink.com
cyberlink.com

Other certificates including the domain name cyberlink.com

(limited to 100 certificates)
webmail.cyberlink.com
www.mesetarcdm.tk
*.powercloud.cyberlink.com
stage.directorzone.cyberlink.com
faceme-security-beta.cyberlink.com
stage.directorzone.cyberlink.com
store.cyberlink.com
cap.cyberlink.com
cs.cyberlink.com
*.powercloud.cyberlink.com
cryptofolio.ai
shop.cyberlink.com
activation.cyberlink.com
csrcloud.app
dev.presar.app
www.idtera.com
uhdbd.cyberlink.com
zecocostudio.com
shop.cyberlink.com
cart.cyberlink.com
vtapp.zipsol.com.br
*.powercloud.cyberlink.com
cryptofolio.ai
ceat.app
shop.cyberlink.com
cart.cyberlink.com
store.cyberlink.com
vpn.cyberlink.com
*.cyberlink.com
www.babgym.com
*.cyberlink.com
todo-list.ru
shop.cyberlink.com
*.powercloud.cyberlink.com
pyloncity.com
*.powercloud.cyberlink.com
shop.cyberlink.com
uhdbd.cyberlink.com
shop.cyberlink.com
*.cyberlink.com
login.setkeeper.com
*.powercloud.cyberlink.com
traceur.biz
cryptofolio.ai
*.cyberlink.com
shop.cyberlink.com
*.cyberlink.com
beta.directorzone.cyberlink.com
faceme-console-demo.cyberlink.com
www.microlion.ml
stage.directorzone.cyberlink.com
activation.cyberlink.com
faceme-security.cyberlink.com
www.babgym.com
webmail.cyberlink.com
directorzone.cyberlink.com
buy.cyberlink.com
*.cyberlink.com
preview.directorzone.cyberlink.com
cart.cyberlink.com
store.cyberlink.com
*.cyberlink.com
www.rahulgorai.co
player.mindbooztapp.com
beta.directorzone.cyberlink.com
yamo.ca
www.kaush.co
cryptofolio.ai
membership.cyberlink.com
pyloncity.com
cart.cyberlink.com
www.baysideelectricalco.com.au
api.socialreachly.com
activation2.cyberlink.com
hugelyviral.com
uhdbd.cyberlink.com
*.powercloud.cyberlink.com
store.cyberlink.com
shop.cyberlink.com
app.gplawintl.com
preview.directorzone.cyberlink.com
faceme-console.cyberlink.com
*.cyberlink.com
www.sweetspotjs.com
*.powercloud.cyberlink.com
premier.cyberlink.com
*.mail-uprime.cyberlink.com
store.cyberlink.com
uhdbd.cyberlink.com
dev.moonday.app
*.cyberlink.com
premier.cyberlink.com
*.mail-uprime.cyberlink.com
merchant.simpleservice.app
membership.cyberlink.com
preview.directorzone.cyberlink.com
*.cyberlink.com
zecocostudio.com
shop.cyberlink.com
cse.cyberlink.com

Certificate

The complete raw certificate details for *.cyberlink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH62yHROJzoDPwl/AxtM
cRFhSdBS3QLmtLNMOz3FbQcDMTnkNxe6YNpEcZL4fxpjbBEPlNtF928A8PabkjgO
7ObDZ1yQsnDKY2o5NIqqeegv2ZUX2tj1qKLTEgtsEaQnBOFg5CYiQ6VREobr1MMK
T5gvrdIXuvA8wIVP3G33RPYbQhR7zPW9CzWVEidVmpUH5VDfc51bjIx71h41xPnC
4YfNx7yL8oYXAF5qIi5SjX5HtmCfvLZeIy8fDURMkjFlC+ZaxH7orZPu70Yx0+L/
GHuS9P6Ip8yprFSuqCL+bS8vJFdrQ9hUIHh8vVuU3uBv25QoWt0zdfXv+sdlaTj+
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13036175512297529967887803755506381416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cyberlink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25815099213445177159094358345197796983772609893036863309148717656991751717934365473362125549524899158409707542388701843974410781105070466268066699055291409925539945153775816478683590298856866416633106520502734400648294571943475628487431216927827838323573550666007597625629543933110081426277692329076008751080417178131657791410259163419319226241338291825530932562915609958954318509677691495071495846442413815668514198253623184853805927142276748938024351642950933498576419628987404586003519548435087479059715087280111143848781634003394368218175187793236183841338694431079421061008544636239796078413115428328115726253709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d5a032f620c10900614f66d1c1cd199fc1e2d0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberlink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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