trajectplanner.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 5a:4a:66:17:ec:5d:47:49:8c:36:bc:97:8b:38:22:21 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trajectplanner.nl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:4a:66:17:ec:5d:47:49:8c:36:bc:97:8b:38:22:21
Serial Number (int): 120016820289352545168114567455752856097
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3e:d5:b6:0c:80:13:83:38:cd:90:94:56:2c:1a:01:aa:4a:70:82:de
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 94:b1:85:5d:d3:aa:d5:7a:6d:f9:9a:aa:57:6f:1a:45:87:cd:f8:5b
Fingerprint (sha256): 48:e1:94:51:8a:3d:58:0a:c5:10:95:00:41:cb:2f:8e:09:cd:b7:6b:03:b2:71:1c:ee:49:f1:e8:fb:a0:d5:7c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate trajectplanner.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trajectplanner.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trajectplanner.nl
www.trajectplanner.nl

Other certificates including the domain name trajectplanner.nl

(limited to 100 certificates)
sni63226.cloudflaressl.com
timon.constructions.se
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
queuing.adzily.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
ccg.boorran.com
*.trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
app.astrologic.info
sni63226.cloudflaressl.com
*.trajectplanner.nl
www.deathisreal.com
sni63226.cloudflaressl.com
id.auth.au.psithur.app
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni.cloudflaressl.com
sni63226.cloudflaressl.com
*.trajectplanner.nl
sni63226.cloudflaressl.com
broker02.trajectplanner.nl
sni63226.cloudflaressl.com
*.trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
mta-sts.redbone.mx
timon.constructions.se
sni63226.cloudflaressl.com
gaali.vn
auth.loresome.com
www.oktagon.tv
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
www.codaaa.xyz
junction.social
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni.cloudflaressl.com
auth.trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
*.staging.trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
admin.blackuptech.com
sni63226.cloudflaressl.com
*.trajectplanner.nl
*.trajectplanner.nl
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com
sni63226.cloudflaressl.com

Certificate

The complete raw certificate details for trajectplanner.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120016820289352545168114567455752856097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trajectplanner.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709330510297476886973109618304694253057631573047849266097231873187760912963843134609984661408326593476138650711906886384585566104326908972850960506164438105337659045904668399030987773635216732488602767084279473083088129489151472436366709738194398523260986991820817340735614000560444303042808946740432957558058216329816658236457467015413269099360286861532440156682635154764127661360903910388172136940858176433416242601879902795168732351878220759063694223550468327796498441360498206247280283874405566104365771038426888774126676914366606008091235954521351788900841974383146368919320711788465887037760433171428594341026953449089874899080837284533651763436485502171564024994000495264658260511001387498551323219954974234413564160011751814997553214654312213902040177543550028312878282181906052239244416098299668319337669142462128658006473317208111114943193568519539786378352052437853928888016904436738480397285002476348432605580151140371976740829338895961691293640469113548014944434997344692989039947730836552427903718228160264712012428594555344221696123483215739281342090454705579324009083551096324205966839164977507260076775224396133152393814141363372585106598994801697019628622872747385803026707084802716974878754400690218743637561165391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ed5b60c80138338cd9094562c1a01aa4a7082de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trajectplanner.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trajectplanner.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016f9e1291120000040300463044022008874443f7618acf7c2dc0770c20a8c8b3a66c217a98f379e6fe21b5c94aba71022069e4c1817705ca567b59f99977ad008beca1b28b44815b1a5e9968eb88dff8180077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016f9e1291010000040300483046022100c00b8b890decd4516bbd8be3bbeb291763bec9e3a63009649642a9440929bf950221008bd98ae44fcb608a9644d69f41ad2975d7680b39468553a16f4238e1e9b96cb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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