*.appareluae.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:1e:3c:42:1e:1a:78:35:12:b2:1b:73:c9:93:25:92 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.appareluae.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:1e:3c:42:1e:1a:78:35:12:b2:1b:73:c9:93:25:92
Serial Number (int): 5473903071847203391095743246947788178
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ba:2f:47:ca:c8:12:77:7f:7a:e4:f3:4e:32:a3:7c:8e:e9:fa:ad:cc
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 99:80:22:09:35:1c:a3:e7:83:3e:dd:d9:11:ca:27:f8:3d:8e:17:97
Fingerprint (sha256): 4c:4d:54:75:8d:96:03:e8:b9:8a:5a:e4:67:b8:3f:a9:50:b4:d3:29:cb:93:23:44:0d:9c:d6:aa:87:b6:2a:8b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.appareluae.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.appareluae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appareluae.com
appareluae.com

Other certificates including the domain name appareluae.com

(limited to 100 certificates)
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
appareluae.com
bcc1.talentera.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
sni.cloudflaressl.com
sni223814.cloudflaressl.com
bcc1.talentera.com
appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
clubapparel.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
clubapparel.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
fsus-24.freshservice.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
live.appareluae.com
sni223814.cloudflaressl.com
bcc1.talentera.com
sni.cloudflaressl.com
bcc1.talentera.com
helpdesk.appareluae.com
appareluae.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
*.appareluae.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com
fsus-24.freshservice.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
clubapparel.appareluae.com
appareluae.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
bcc1.talentera.com
bcc1.talentera.com
helpdesk.appareluae.com
bcc1.talentera.com
appareluae.com
helpdesk.appareluae.com
bcc1.talentera.com
sni223814.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
helpdesk.appareluae.com
sni.cloudflaressl.com
sni223814.cloudflaressl.com
helpdesk.appareluae.com
sni223814.cloudflaressl.com

Certificate

The complete raw certificate details for *.appareluae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlX8ihyERXJi7FLsej+2
x4YdN8/13XHnNUunrU5CzrpQVcox6Aj5OEmKiBKKZM2LJAlpsB33GF0iB0bKRKWA
0RZ7E/vurjVbysYNkaDXvOutrxeeWDGrdPDiyHrr+zpJu9uK1nbjNVCJoYoWL7Y6
NXWm22owtR3/KGcidhFPehliwBVaanJaCm7CqJJMGKP1Nh6n9bx0FfJcsBKnqvQ2
5+cYYKWQ/EIsUA3OPv1yU/EYpC1KCwL5jwYg6LeDM7Gj3xWj1ONE3tp6eZmiFc8+
w19odoejzSt9bQNDhbKcP1nY/pCHAV3+6KCaSjpYMndHeU8BcYwJYEw37W2SJVN/
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5473903071847203391095743246947788178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.appareluae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24532632678219133041418126682399975954952554333658961381014367199944413853710795256121789298591730865178532572062723939842958845022064901156073213394532641921393493859355037633592010904778684258706039360909281723855674058537309663907176424517777640903475818469378983618728382604091300504300992317763728175746077550277737705011376225904036105615493418727691931836836114587393865016147587681313682638798861363055781000551008331446891684376751992157997888549934645966611912147458587079228501514084062771832684757220253617256528126303493296363135894836171591425769908856572746018904997575277772045035047043703228412952349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba2f47cac812777f7ae4f34e32a37c8ee9faadcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appareluae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appareluae.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001884217ce07000004030046304402201ffabc3f282bacb1b18885f11bdf6712330a83768afc80c05495e84d43b4239f022012638bec1db05b5658070e2d610eb23f1e818648275133fbe929918ca1173df300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001884217ce440000040300473045022100e10efbc77a049dce3012bac3ee7c693b348a5452077c06be3a75e7c23e1ba655022053ba3591901bfbdf751ac8be75828d567c6be12921c94363e7ad4b09ec9b4d49007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001884217ce0e0000040300473045022100d5978a01cd5f2e2fea247d11b4a45cd3b3c42ad19781a1d3ce32b25a3cea9c1c02204588b6413cd584db5c9ceb4ff9ff9f9bd05a22eb4034545d7dcbc2e17dc57565
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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