*.alfred.is

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:f5:6c:3e:15:be:43:d0:9c:ca:5d:b9:28:b5:89:43 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.alfred.is

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:f5:6c:3e:15:be:43:d0:9c:ca:5d:b9:28:b5:89:43
Serial Number (int): 17225044098872494867380464676163127619
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 30:0e:db:d8:f6:6f:19:67:87:fb:8b:63:49:9d:c1:38:a8:e8:b5:db
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 97:a1:ed:ff:fc:2c:ad:3f:ad:e7:f5:ba:e4:5d:fb:9a:82:18:80:54
Fingerprint (sha256): 47:b7:e5:fb:98:12:8d:9a:cd:88:ad:bd:ef:72:91:b4:94:55:51:53:08:b4:a9:4f:55:d1:a3:56:cb:ad:4e:f7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.alfred.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alfred.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alfred.is
alfred.is

Other certificates including the domain name alfred.is

(limited to 100 certificates)
privacy.alfred.is
mifo.com.mx
www.we-save.com.au
stage-admin.alfred.is
www.anriar.com
www.progresscoaching.ro
dev.alfred.is
serverobotic.com
lanart.be
merrylands.vetspire.com
link.libere.co.in
*.alfred.is
kopavogur.alfred.is
test-blog.alfred.is
notyett.com
www.theclash.xyz
demo.pinlabs.io
exp6.riley.dev
fynancy.com
lostark-helper.com
clientcommunicator.com.au
nabilcook.com
www.andydarr.dev
littleplantstudio.com
coffee.kiedrowski.ca
foods.com.my
alfred.is
cafezodiaco.posify.in
laketahoe.dotuntalabi.ca
download-stage.santacleo.it
www.sumitup.org
dev.alfred.is
prod-web.alfred.is
embed-test.alfred.is
*.alfred.is
endangered.live
gio.bcyl.com.ar
app.cargocovoiturage.fr
collectskins.com
app.jurni.io
organizados.com.br
www.apicenter.tk
www.bodhionline.ca
zendesk.alfred.is
bank.playmining.com
stage.alfred.is
apps.s2mtechnologies.com
wez.clooster.com
moonrocks.tk
translate.alfred.is
www.senning.dev
www.unleash.com.br
www.gemmapell.com
orbit.jobs
gimnasioelite.turnosweb.app
dev-umsjon.alfred.is
robot.seg.solutions
plarogame.com
www.chapon.jp
www.apicenter.tk
www.cryptopayment.link
www.deltanow.net
picnici.com
www.elproveedor.com.co
www.lala-mobile.com
www.428lab.net
adstod.alfred.is
*.alfred.is
stage-admin.alfred.is
www.vinijlawfirm.com
trivinn.com
zeh.arq.br
worldagainstrape.com
jsp.io
www.gplps.org
dev.alfred.is
api.dev.alfred.is
jonahallibone.com
*.alfred.is
admin.vitalve.nl
api.dev.alfred.is
www.deepfried.fish
*.alfred.is
backend.pitchview.de
stage-1.alfred.is
www.closedcaptionai.com
api.alfred.is
www.coedit.cl
alfred.is
blog.alfred.is
kikemindfulness.com
greenwooddevelopmentnj.com
evaluate.watani.gov.sa
admin.re2fe.com
www.truckercom.com
gimnasioelite.turnosweb.app
www.bilicogames.com.br
jsp.io
extranet.arcticvehicles.com
adstod.alfred.is

Certificate

The complete raw certificate details for *.alfred.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunS2leySmIhW1sBAd3nh
SSSJSkD5++8n0NviVTvKvjrLBe2/fU6gLmpBRv4z2KQ96rdmEZlEY4rhxSKJcqGR
cd3C6idfz7206njsYgUbS2lNaBTMYaRU9VuRsYcLGwZZKIlHpXlsoaeb0rJ11K9E
x61bO8GufDljq0bBHgFWPxdMj5V6wWhLA5Dg43Ii/eAe2lzOMVBRjqIjbMcrJIZ1
cfu0LO/wDS5NViV9NzOH6w6l7uP67INK0uGkRdNiNp2azUXeECafnIJSe5AVBVB+
WF6Z4rOH1ZzZsKQVDEY3ud3hmN2Klm4gwD3wN7Mmh4+OwUWCNd/Ekzl5yAEwmnj+
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17225044098872494867380464676163127619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alfred.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23537878160059445342351165603034331549998311014939612816140822893132411233813547412698913794600379388807746664195359364342973746354221176703035590841433597820594689201026899565576219215579941090381803884375966442359170473355346156778008826245701867393061201073245005385902772444489625020899373018060097808592742472766945829623282287482159085307432372365533177819134215690598135410465744719668097740677250751756027115951814479167929040421663234721020114880545965693332491118093467225379293992306276837368396179049230106497905895433432568923998354974256376905864901571857357369032095070873458148771159159722574228291103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							300edbd8f66f196787fb8b63499dc138a8e8b5db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfred.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfred.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008c2088ac5caf2c72ff0c14955b23a67b6029d76b6df18ad87dce42d5cef14796c926ea48e9b51ac78af0716e41b70f8013682c774a27e21ac1b477e10de08f657fa8493b6f7cc123e7f30ae20cccc6eb3ada899c9efae21fd4cc7688b0a39b0f442d23bf07daf2a714ab3cc3bfa8c26cbd68389e50c71253f5574d1ad938c2c6e8ca401768d2925f2175b1c965cc3a23e41b888700be4c1f6f865f8212c00bb29ecd084221cafadf1ada920244edab06bf8c27fa7eba97d7b046128b10b4b107d3d52ff8f5817b2fcad0b1582a7e2da3f4dc31266f08c8985eae41ad759a3b886e5ee2faad7f695b31e3ec7e4c98a2c5e166e34ac8061eb3bc997561f5206139