www.cwgc.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:fd:95:cd:47:bd:88:86:db:b9:bb:b8:73:99:3d:4a was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cwgc.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:fd:95:cd:47:bd:88:86:db:b9:bb:b8:73:99:3d:4a
Serial Number (int): 14608969406065297048899594299240955210
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:5c:54:a8:ab:24:d9:23:6d:80:58:a2:21:b1:ac:26:39:b8:e6:10
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): d1:84:56:e9:fd:ec:dd:7a:e0:db:9e:97:52:4f:ef:3d:b4:d0:82:83
Fingerprint (sha256): 49:cf:7e:c1:ae:72:7e:df:f4:ad:70:e2:33:40:c3:d7:78:53:ee:75:9f:25:23:a7:7a:33:42:17:c3:de:a6:ab

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.cwgc.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwgc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cwgc.org

Other certificates including the domain name cwgc.org

(limited to 100 certificates)
shapingoursorrow.cwgc.org
fourcorners.cwgc.org
www.cwgc.org
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
crmlive.cwgc.org
kiosk.vidaglobal.de
liberation.cwgc.org
blog.cwgc.org
www.cm.production.cwgc.org
kiosk.am-weststrand.com
www.cwgc.org
blog.cwgc.org
media.hirschmann-automotive.com
publications.cwgc.org
blog.cwgc.org
crmlive.cwgc.org
app.cwgc.org
magazine.legacylighthouse.org
app.cwgc.org
crmlive.cwgc.org
kiosk.der-kleine-georg.de
downloads.yspi.ie
archive.cwgc.org
owahub.cwgc.org
magazine.legacylighthouse.org
kiosk.vidaglobal.de
fourcorners.cwgc.org
kiosk.der-kleine-georg.de
quals.truebeck.com
secure.cwgc.org
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
intranet.cwgc.org
crmtest.cwgc.org
kiosk.vidaglobal.de
blog.cwgc.org
quals.truebeck.com
emag.indianjeweller.in
www.cm.uat.cwgc.org
www.cwgc.org
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
photo.cwgc.org
magazine.legacylighthouse.org
blog.cwgc.org
magazine.roarkidsmagazine.com
webmail.cwgc.org
kiosk.vidaglobal.de
news.vdmno.de
thecentre.cwgc.org
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
kiosk.vidaglobal.de
publikationen.contipark.de
magazine.elektropraktiker.de
blog.cwgc.org
shapingoursorrow.cwgc.org
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
magazine.legacylighthouse.org
www.cwgc.org
magazine.legacylighthouse.org
publications.cwgc.org
blog.cwgc.org
blog.cwgc.org
secure.cwgc.org
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
mysite.cwgc.org
brochure.ntpwarranty.com
www.cm.uat.cwgc.org
wirbeicontipark.contipark.de
blog.cwgc.org
thecentre.cwgc.org
webmail.cwgc.org
www.cwgc.org
magazine.cioa.com
cwgc.org
kataloge.weilermoebel.at
magazine.legacylighthouse.org
downloads.yspi.ie
archive.cloud.cwgc.org
adfs.cwgc.org
magazines.somethinggoodmagazines.com
katalog.erima.de
publikationen.jugend-bildung.landkreis.gr
citrix.cwgc.org
katalog.gartenmode.de
flyer.aqua-dome.at
intranet.cwgc.org
brochure.ntpwarranty.com
magazine.legacylighthouse.org
brochure.ntpwarranty.com

Certificate

The complete raw certificate details for www.cwgc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KTvxn+5FqqbzluGj4Hl
EuSGRFSqxx3gcq7CQmZxYQC2/rQtj0a3+sKx3aabm1pVus11ZrvQnjeUCvDk6num
v1XbYIjKs/W3tpFpGd4ieAnGWYW6ECb5+OOM6LL+GF0jH6q5lBSWkPVGgM24I0UJ
kLifOKEyg5AgyeXBX4lwr0O1ACtFyEloGdVo4o/eMbBoXmVdzyLCplpkl4Rnnnid
sW9a3AJMZPK/W5S9I+Q+fxlRo4Ha0eznL3UVfh9sMZVBgKBIwKRRIkjDhM0XNXNw
L+wgVcPOHOowySATvaZnEeMZqqnmxxq2/uQNokEGsFKpx2E7rXWzNW4wWOkPJsw8
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14608969406065297048899594299240955210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwgc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30883479691656757726836486747889272595641220720096352609500375383574636408755077174958474759647790673523020885968972506368118248825931622841735199441488159680839607730249567955136436110968087194560324541651685228496524269693571146434483741389548536401447946122205967784488137970525008820891894543408381721588402840378948377308905463137910947203823483761484552056751467322286196982253701719385628953753695174236693602242437536314717994794934840810313004509667065037081017579939014940603338275710055054078569328037107516133452235676811312471736727017059938132649283446711933150975490880178784611222321762882007937596429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							025c54a8ab24d9236d8058a221b1ac2639b8e610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwgc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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