*.juancash.com

- ZYBI TECH INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 13:3f:97:1f:7e:da:2e:ed:c9:01:1d:7d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ZYBI TECH INC.

Organization: ZYBI TECH INC.
State / Province: Metro Manila
Locality: Pasay
Country: PH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 13:3f:97:1f:7e:da:2e:ed:c9:01:1d:7d
Serial Number (int): 5957091171569927537716960637
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 58:81:84:bb:d5:15:e5:83:1d:2a:14:04:1f:5e:c3:83:a6:7e:e4:5d
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 1f:41:1f:f7:a5:f8:8f:35:75:9a:71:e5:54:4e:da:97:a6:95:a7:7c
Fingerprint (sha256): 47:a3:0e:7c:92:95:10:bc:f6:d2:5d:3f:91:e5:25:e9:65:de:d3:a9:db:1e:8e:7b:b8:b1:ca:1f:73:62:88:a9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.juancash.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.juancash.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.juancash.com
juancash.com

Other certificates including the domain name juancash.com

(limited to 100 certificates)
merchant.juancash.com
bank-api.juancash.com
api.juancash.com
ssl377704.cloudflaressl.com
dash.walnutdev.app
www.juancash.com
juancash.com
axa-lpo-qa.bop-tech.com
merchantapi.juancash.com
activity.juancash.com
adminapi.juancash.com
file.juancash.com
www.juancash.com
ssl377704.cloudflaressl.com
ssl377703.cloudflaressl.com
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com
admin.micepad.app
cmxros.juancash.com
ssl377703.cloudflaressl.com
smyth.app
ssl377704.cloudflaressl.com
ssl377703.cloudflaressl.com
*.juancash.com
adminapi.juancash.com
ssl377704.cloudflaressl.com
www.pill.com.co
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com
*.juancash.com
api.juancash.com
auth.obboco.com
ssl377704.cloudflaressl.com
dash.walnutdev.app
cradlecode.com
link.jibble.io
kurokodairu.tk
juancash.com
api.mch.juancash.com
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com
www.pill.com.co
ssl377704.cloudflaressl.com
*.juancash.com
activity.juancash.com
ssl377704.cloudflaressl.com
*.juancash.com
bulkybrains.app
iso.signing.juancash.com
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com
sandboxnuts.app
ssl377704.cloudflaressl.com
h5.juancash.com
h5.juancash.com
admin.juancash.com
admin.micepad.app
link.jibble.io
iso-2024.signing.juancash.com
ssl377704.cloudflaressl.com
ssl377704.cloudflaressl.com

Certificate

The complete raw certificate details for *.juancash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDfrpzsoC/TYbnDajvec
Z8//dQSbWREb28unLfqd/KC1dnNiV7HMKrDPd6qgAV0INt4OTR68zDgox+2czxR8
AuZcMonS9eaTmhGBNlzeixFW4pbsLP1NBchMoQ6BxzXEqy54jwRFFB4harEXiF7o
GTkFgoAbayVtMooyDlYhxOTQSiAe1F0hj/XyMlMaoKYVZ0TEUB84NoHpUKpfsFzM
yK+q62uVvNk5IkWIY73vDGQAks7SIucav+1Vjf2x6mxV072222QV7wzsi03G3Cpx
Obj0j2MY9zwsUvY6Nxz6n0VK3WgusUChs1r2fieOWbtspCXWoZb4C2NRKTlODrux
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5957091171569927537716960637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-27 00:57:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metro Manila'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZYBI TECH INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.juancash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23760376770025089219740563039653532056472785112737858902531756012951457135461138214056127045607578451644621527602654123253071587229144986998340064003290194498461358886788888359042028944032365460907334183202188719696716823985670841594745443098541143160221202880351611872549275019834133461548884480268943089562901006517518504090045888924840148463069091870826664588754060344604496854357127851876755897269485592694618297353010422533313747619835558589628761544324845939662961847244720808083002638102289214842851650348317972953507728064402228183221310185317616405884837914723245488668510345236981012939611311703748461179189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juancash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juancash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							588184bbd515e5831d2a14041f5ec383a67ee45d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018acefdb983000004030048304602210095d5119a5f31debb80263b3f6fac08f5ee01b78dfae4b9af7189385a657013f6022100fb59fad01a2bec4cb7c49d6bcb0c22c627825e5cf26e3a8a056397b8c96a0602007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018acefdb96e000004030047304502210080b10efc067541f0f09bd2fa2af5ea701abb9f0105d5aea64e92c2c4701b1a8902204fc03969f8803eebcc53cd963c1af884d189c759b39fffe795110a078e99518e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018acefdb9b100000403004830460221009d9d5b1b774b10f81f4ae2decfd1a107057ae77e708b7f637cc1e50c7daa42190221008ae4cbad35e35a075ea76cbd7ef464f73630a1b454aa3b5048b377934fb70c6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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