shop.asmodee.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a0:81:e9:c6:c1:3f:2b:8e:8f:f4:68:ac:5e:0e:3b:57 was issued on by Sectigo Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shop.asmodee.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): a0:81:e9:c6:c1:3f:2b:8e:8f:f4:68:ac:5e:0e:3b:57
Serial Number (int): 213351027168758336005961959597228833623
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ab:a5:45:29:fd:0c:14:8c:e8:30:e7:11:7b:93:bf:67:c8:7a:04:03
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 69:06:8d:38:25:b0:3b:86:99:39:89:65:e5:6a:f9:3b:6f:18:d7:15
Fingerprint (sha256): 49:bf:f5:11:32:c2:5e:ef:e8:bc:29:ac:eb:e1:74:ec:27:a5:34:02:30:2a:74:d4:2c:e4:c7:5f:df:db:b1:d8

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate shop.asmodee.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.asmodee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.asmodee.com

Other certificates including the domain name asmodee.com

(limited to 100 certificates)
ssl471549.cloudflaressl.com
ssl471549.cloudflaressl.com
*.asmodee.com
asmodee.com
asmodee.com
asmodee.com
sni189662.cloudflaressl.com
sni189662.cloudflaressl.com
webshopnl.asmodee.com
preproduction-mdm.asmodee.com
ssl471548.cloudflaressl.com
forms.jugosystems.co.uk
sni189662.cloudflaressl.com
dev.asmodee.com
sni.cloudflaressl.com
asmodee.com
sni.cloudflaressl.com
forms.resursbrist.se
dev.asmodee.com
forms.bemovil.es
preproduction-mdm.asmodee.com
sni189662.cloudflaressl.com
shop.asmodee.com
sni189662.cloudflaressl.com
asmodee.com
sni189662.cloudflaressl.com
forms.itcrew.supply
shop.asmodee.com
promo.electrolux.ro
reclamation.asmodee.com
gencon.asmodee.com
dev.asmodee.com
asmodee.com
sni189662.cloudflaressl.com
mdm.asmodee.com
webshopnl.asmodee.com
dev.asmodee.com
ssl471547.cloudflaressl.com
asmodee.com
ssl471549.cloudflaressl.com
ssl471548.cloudflaressl.com
ssl471549.cloudflaressl.com
sni189662.cloudflaressl.com
ssl471548.cloudflaressl.com
asmodee.bynder.com
ssl471548.cloudflaressl.com
ssl471547.cloudflaressl.com
forms.finaform.it
sni189662.cloudflaressl.com
asmodee.com
ssl471547.cloudflaressl.com
be.asmodee.com
ssl471549.cloudflaressl.com
jarvis.asmodee.com
ssl471549.cloudflaressl.com
dev.asmodee.com
ssl471547.cloudflaressl.com
forms.aurabrands.com
asmodee.com
forms.embello.com
ssl471548.cloudflaressl.com
sni.cloudflaressl.com
*.asmodeena.com
ssl471549.cloudflaressl.com
asmodee.com
be.asmodee.com
ssl471549.cloudflaressl.com
ssl471547.cloudflaressl.com
asmodee.com
*.asmodee.com
mdm.asmodee.com
asmodee.com
dev.asmodee.com
form.europabw.co.uk
shop.asmodee.com
ssl471548.cloudflaressl.com
asmodee.com
asmodee.com

Certificate

The complete raw certificate details for shop.asmodee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz17t6L2XFeoZk8FZOFiV
vsWaSdWR2UhTNnhAqQOk7mDe3mNh7zTcVO0t+zQXYIvoUyV/mXMaUqNLzsKgw0uB
a/duwKSnpnoW5U1G30Ik3WQ9G8Wuhd0U2gLG4BTpjHuOnTBNas3dA7YkOX2Nj0Ph
iel9Luy4d49ByaTzKucg3koooYtRkAVcjMt629d9yuiCXflNwhBTG6KT3DuDZ1EY
eC3S5wibfvfMAMH2u3eT61JrgZn4+sV8uzAaDrtP9U30SC29OIuw5Y9xW2AkuvKH
Uw3ZsQoe0MbBzuOZA8Q850nzo0t24faMlK3DFWE/ZgeIqbdgbPYp3UnJVD298NNh
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213351027168758336005961959597228833623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.asmodee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26178140526558743971704834353601392132816030893122331353173670690739088118681803347503686243997002680726789288746794978298660711111460755869141677703377346129027000499621628387476445911015480728623607733131376733121299393500721398538241591889564657941507634517224264938420124004208072698079026410320161068703916637632266249734300254583304655980391455348189292337190486934699308363889635779236372849402282350327623813768499631532113566122554334062274491889184065748483648713220605323380066113216147141229930293318239348362296451683365180661272775469505141534301134259795229517203615148302794920184434771752719802917149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aba54529fd0c148ce830e7117b93bf67c87a0403
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.asmodee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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