casacupula.com
Issued by UbiquiTLS™ DV RSA Server CA
About this certificate
This digital certificate with serial number 66:a7:3b:a4:42:e1:88:af:09:c3:3e:f3:79:82:04:9b was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=casacupula.com
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 66:a7:3b:a4:42:e1:88:af:09:c3:3e:f3:79:82:04:9bSerial Number (int): 136449578821720667466406715717910135963
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ce:7a:96:93:35:db:92:de:2d:b1:04:55:0e:3a:bf:c7:05:45:8e:e2
AuthorityKeyId: 38:12:c6:79:02:66:38:02:e3:37:24:e5:8b:0f:ff:45:95:69:e6:31
Fingerprint (sha1): c3:64:0b:b0:8f:21:3a:c8:c4:a0:07:24:2e:85:1c:2b:36:4b:07:79
Fingerprint (sha256): 4c:8e:5e:f9:19:8f:82:04:d4:ec:b4:80:26:5f:df:47:5d:90:c2:f6:16:07:21:2e:de:b4:c9:06:07:95:1f:f9
Issuing Certificate URL: http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCheck the revocation status for certificate casacupula.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for casacupula.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
casacupula.com
www.casacupula.com
www.casacupula.com
Other certificates including the domain name casacupula.com
(limited to 100 certificates)
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
sni.cloudflaressl.com
concierge.casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
casacupula.com
casacupula.com
casacupula.com
reservations.casacupula.com
mail.mail.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
sni.cloudflaressl.com
reservations.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
sni.cloudflaressl.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
sni.cloudflaressl.com
concierge.casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
casacupula.com
reservations.casacupula.com
casacupula.com
casacupula.com
casacupula.com
reservations.casacupula.com
mail.mail.casacupula.com
concierge.casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
sni.cloudflaressl.com
reservations.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
concierge.casacupula.com
casacupula.com
sni.cloudflaressl.com
casacupula.com
casacupula.com
casacupula.com
concierge.casacupula.com
concierge.casacupula.com
Certificate
The complete raw certificate details for casacupula.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIQZqc7pELhiK8Jwz7zeYIEmzANBgkqhkiG9w0BAQsFADCB gDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJjAkBgNV BAMMHVViaXF1aVRMU+KEoiBEViBSU0EgU2VydmVyIENBMB4XDTE4MDcyMzAwMDAw MFoXDTE4MTAyMTIzNTk1OVowGTEXMBUGA1UEAxMOY2FzYWN1cHVsYS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gaYaDGGjRMrAg4JSaKXm4qYD k/v30k/amCWc6Nd/hn4hv7TXW5rDTqVdeG08kYootEyAkUzpjy+89mh8gQzs9/kU WUnLof7zOA9fR/e7CMFANNFRctjzkhwe6se3j7aBtuAtTiXsVsetJSmRR6yQb9w1 vm6pIwiUc70cLEKSSc+pdCccAxCNdK6pSy6sZyc6DDYV/9EyWRD1vFqQKBJasEt3 z/XfuNZSoNxyrXqb1TNoP2VKaGZJ0Dme0aWaLiFVqSNu3yzQFRRGsIa6yy1fy+YH Sle6B24ksXcHoivNxx+9nCXMXSdN7sUBLvHWpT0TVioPrcVkp2kS3WhTAxifAgMB AAGjggKAMIICfDAfBgNVHSMEGDAWgBQ4EsZ5AmY4AuM3JOWLD/9FlWnmMTAdBgNV HQ4EFgQUznqWkzXbkt4tsQRVDjq/xwVFjuIwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFAGA1UdIARJ MEcwOwYMKwYBBAGyMQECAQMEMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJl LmNvbW9kby5uZXQvQ1BTMAgGBmeBDAECATB0BggrBgEFBQcBAQRoMGYwPgYIKwYB BQUHMAKGMmh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL1ViaXF1aVRMU0RWUlNBU2Vy dmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20w LQYDVR0RBCYwJIIOY2FzYWN1cHVsYS5jb22CEnd3dy5jYXNhY3VwdWxhLmNvbTCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY gwDEe4l6qP3LAAABZMTDqbcAAAQDAEcwRQIgcnuxhdYaMqV8PB4oVSmJyjZvRnUh 6BSdrGnWGh16LpUCIQC/jSohAuEoJfjRFmxaLb/HW0gmQKQZOAMHl0D1Bx51XwB2 ANt0r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABZMTDqfoAAAQDAEcw RQIgF2+mpNzmHRW6C6X8bPtSXgW+sA+GF51djmQ89LcjwgECIQCMK42+DDNab1u6 yhspAdwyVIIyeLQ0+y/VerSKptvQSzANBgkqhkiG9w0BAQsFAAOCAQEAbCMZ6ktV OTCY+e4Xbr2MQE+yl9cyURkatTPau6zTu6F//Hb0gThvz2IBsN4XAGiwyDu+aJIK 4aeicyDGWVTW5Qr9ljd3iA39hASMntQn5w6TPmrNaOi/Kwn2gSJ6bGyAPelDokp7 MeHUXk1u7FBB8+zhzryjOSgsd0UUPH/0TS1ZX25VNEhox8mzokimA6tTIblNuLuc tTR78lIu6xUriGlms2PmamNlgJgWWvwzN0vuhHHjs1zTls46qmHzNPVEr8X8mRwH uxABcDWj88tohW0gRGi73dDApvTPpEDfdlTGFSYAUVptTV1l9VBMV5Nudm39BS2k r/Drbp1tueHEog== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4GmGgxho0TKwIOCUmil 5uKmA5P799JP2pglnOjXf4Z+Ib+011uaw06lXXhtPJGKKLRMgJFM6Y8vvPZofIEM 7Pf5FFlJy6H+8zgPX0f3uwjBQDTRUXLY85IcHurHt4+2gbbgLU4l7FbHrSUpkUes kG/cNb5uqSMIlHO9HCxCkknPqXQnHAMQjXSuqUsurGcnOgw2Ff/RMlkQ9bxakCgS WrBLd8/137jWUqDccq16m9UzaD9lSmhmSdA5ntGlmi4hVakjbt8s0BUURrCGusst X8vmB0pXugduJLF3B6IrzccfvZwlzF0nTe7FAS7x1qU9E1YqD63FZKdpEt1oUwMY nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 136449578821720667466406715717910135963 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UbiquiTLS™ DV RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'casacupula.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23165542032097305181881576083766368610644585331380333550961063403858574491250350458675752631539003074623585591127378717335112705493987822433492309217457223904775522987848817556633657888396090637457544924481132185985542050507858802446256392049844560045918417547321730739845376126427556127462031983094959672918298932905057719321455318130647953412582382001104772060686026290381015008681329786639752510235831065029107208611357505899123180115946867648471485078238738728225944582718748113823874892362540945182674414990161423601153243650991872630403901783450842309498462909233555934093325727625121592207145006164125386217631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3812c67902663802e33724e58b0fff459569e631 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce7a969335db92de2db104550e3abfc705458ee2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.net/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casacupula.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casacupula.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164c4c3a9b700000403004730450220727bb185d61a32a57c3c1e28552989ca366f467521e8149dac69d61a1d7a2e95022100bf8d2a2102e12825f8d1166c5a2dbfc75b482640a4193803079740f5071e755f007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164c4c3a9fa00000403004730450220176fa6a4dce61d15ba0ba5fc6cfb525e05beb00f86179d5d8e643cf4b723c2010221008c2b8dbe0c335a6f5bbaca1b2901dc3254823278b434fb2fd57ab48aa6dbd04b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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