monkeymediasoftware.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:5a:bf:97:e0:fc:d5:46:ab:2e:44:60:44:7e:39:dd was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=monkeymediasoftware.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:5a:bf:97:e0:fc:d5:46:ab:2e:44:60:44:7e:39:dd
Serial Number (int): 7117332669509849648244720471310744029
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:b8:fb:36:40:af:9c:f3:fb:56:95:ce:52:f1:f8:08:41:ac:f1:64
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 1e:8d:39:2f:4e:d5:07:91:64:dd:77:48:e2:c7:2f:db:75:12:5b:ad
Fingerprint (sha256): 4d:1a:94:6e:1c:8e:c2:a4:77:e8:12:1c:b5:79:28:02:d9:72:2b:b3:18:b7:b5:48:9b:1e:36:e9:a6:29:74:e8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate monkeymediasoftware.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monkeymediasoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monkeymediasoftware.com

Other certificates including the domain name monkeymediasoftware.com

(limited to 100 certificates)
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
ideas.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
ideas.monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
online.monkeymediasoftware.com
ideas.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
monkeymediasoftware.com
online.monkeymediasoftware.com
ww2.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com
online.monkeymediasoftware.com

Certificate

The complete raw certificate details for monkeymediasoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iflmyRRBvKtVJwDbuZf
uAfnfQDiZoETJ+9zFjzpDEBljd4HlYEPziaNFO9G2IU/cCl8cqxOzBPqExl4Z/Vx
H14PTedwwAFph5YMFVxNbz/86NusZJkmkBwSdlTzPP4gbLux7uFZ8v9URh4HRfuA
1iiEd332PhFqbpIkPUdwGzubpQvhRjnM1q6wkt1VuhzV887HL2UzXIYKWpg2UMQD
yT/7s38Gf0bmtHvrhFNPNoBeFxso6V4W8PlHYlajzog9qIy9M+pOHLfR3C7DucSq
g/P4CoigdNwrEdv2a0oydXQLF0T4U+s2sX6cUCAwOirHnE63Wm068qbI9pvYv/G0
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7117332669509849648244720471310744029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monkeymediasoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27034671156656246068658558953575970787954219549107624940090543005425901506623852706951241130435803278283057573736956800672838739432995455430969172825144605289386434604046301192449988879639444473896479943612683499965322001732989500710925192443705877958337661790121098924404427283488960295314952860615511236827291469491849081492479779138442790078409101698656446927823899631044736846621916451455157535596601481481046607541961923117128918657877225903841914296506087715823400369969347345803157248703680643183715805876170719849851395848593397242098887589595677871093983373332710460454440215611129743528715527767355735258193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cb8fb3640af9cf3fb5695ce52f1f80841acf164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monkeymediasoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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