*.sfda.gov.sa

- Saudi Food & Drug Authority -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:67:dc:c4:de:8c:b0:1d:92:55:a9:c7:af:f7:59:99 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Saudi Food & Drug Authority

Organization: Saudi Food & Drug Authority
Locality: Riyadh
Country: SA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:67:dc:c4:de:8c:b0:1d:92:55:a9:c7:af:f7:59:99
Serial Number (int): 17819248249341403233877306949619898777
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:de:ac:df:42:7c:3f:1c:1d:98:95:34:ea:4c:4a:89:4f:00:0c:b6
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): aa:b1:fa:c6:d0:cb:ad:a0:bf:2f:ad:ab:a3:c5:c5:42:a9:f6:bd:eb
Fingerprint (sha256): 47:dd:fa:8a:19:1d:37:0e:f8:fb:ec:5f:f0:65:ba:bd:8f:20:b2:42:1e:19:5d:b5:32:b4:42:8e:a7:53:2d:6f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.sfda.gov.sa

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sfda.gov.sa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sfda.gov.sa
sfda.gov.sa

Other certificates including the domain name sfda.gov.sa

(limited to 100 certificates)
*.sfda.gov.sa
friends.zoompharmacy.co.nz
*.sfda.gov.sa
jabvc.sfda.gov.sa
*.sfda.gov.sa
keystonesurvey.keystone-solutions.be
*.sfda.gov.sa
*.sfda.gov.sa
survey.ello.co.za
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
surveys.taylormadeportal.com
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
survey.credexo.com
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
survey.ello.co.za
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
www.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
www.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
www.sfda.gov.sa
www.sfda.gov.sa
encuestas.hooli.com.do
*.sfda.gov.sa
survey.hawkgrips.com
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
keystonesurvey.keystone-solutions.be
survey.ello.co.za
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
contact.futureim.com.au
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
*.sfda.gov.sa
servicenowksa.unikomm.com
*.sfda.gov.sa

Certificate

The complete raw certificate details for *.sfda.gov.sa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Y0r/rm1vwPrSamIpax5
xhAiwkQGOeGo/5enWqgmXjRJez+JbMYanN7KC/l0VPHOFDIHPEg1d/vTQIjY1zo7
HDVPU4gmVHYjHw83mfjaDWl5nnVKvWCe0+pE+okjOn72cmk53KC7dESc6MQIQf5c
hrMJPhpqRdHpgzUKwqppUuib1dQsKDIRE+W5CKZRjzTxxHPCBtfCeqT2DGuB0eVU
g9s3piK1b0/LA3fqPOFhedzpysk7vhebTTiO7iAUyd0q5ZnEppyos5Ns0rWRDv13
SokZxLp9ulfunQTL9lbORrxND/KF7M7GS5YugnAQyReR6BRsEGy9hLS3+YULkFGx
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17819248249341403233877306949619898777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riyadh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saudi Food & Drug Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sfda.gov.sa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32007905592950905290868534786763273054464008520280782733974743150672961599843805121817055831074506146322088093157484554001143204915675843958673591446650636737651547697239902883639364720679097415494276081667381270698348915664869060857153677897979044052451470274711539144401943257512268431957622412766895621327114377798034002163849309891862522179186717258514157281638913760790401143501247056775795470817616151446612170867109162417453072401038280708904695127750892432292159403661509068354384985295240888397824822665662602806260712701033826417403712967614157573033321957198200837817569308580963404165685340652738542940593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3deacdf427c3f1c1d989534ea4c4a894f000cb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfda.gov.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfda.gov.sa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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