naft.com.sa

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:df:9f:c5:e1:a5:01:75:cc:21:c6:20:1a:38:96:e2 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naft.com.sa

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:df:9f:c5:e1:a5:01:75:cc:21:c6:20:1a:38:96:e2
Serial Number (int): 17111858729780859827063748415607838434
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:83:b3:a7:50:ad:64:2d:7c:5d:f1:ae:e3:5e:b8:4f:67:16:dd:4c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6f:3d:c3:95:50:62:9f:d9:51:59:d3:ce:02:04:c5:7a:16:16:86:44
Fingerprint (sha256): 51:b8:83:5d:96:6f:96:c0:eb:62:ca:ee:47:40:77:e1:d5:9e:45:57:2e:9d:26:0d:71:e5:a1:97:9c:21:93:f8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate naft.com.sa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naft.com.sa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naft.com.sa

Other certificates including the domain name naft.com.sa

(limited to 100 certificates)
soporte.m-studio.one
helpdesk.media-technica.com
support.lpros.biz
support.jumbish.co
helpdesk.royalamericanhospitality.com
support.jumbish.co
cpanel.naft.com.sa
mail.naft.com.sa
support.cymetricx.com
support.snapcastweather.com
helpdesk.royalamericanhospitality.com
tktdesk.qtesting.online
support.lmp360mediagroup.com
helpdesk.fibraforte.it
support.xeroxuae.cloud
support.jumbish.co
ticket.savvyhawk.net
support.snapcastweather.com
support.intellitechsystems.co.za
help.rmgautofinance.org
support.intellitechsystems.co.za
support.maxopolyworldnews.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
suporte.sanus.tech
support.firstresponse.solutions
helpdesk.media-technica.com
naft.com.sa
support.jumbish.co
support.cloudpso.com
tsmsupport.lenovocloudsoftware.com
soporte.avp-ec.com
support.jumbish.co
support.vembu.com
assistenza.ecologica.it
support.yoizen.com
help2.jdeckman.com
support.periodik.co
support.intellitechsystems.co.za
support.lpros.biz
support.intellitechsystems.co.za
support.jumbish.co
it.ronati.com
naft.com.sa
support.tilopay.com
support.intellitechsystems.co.za
soportesistemas.uaa.com.ar
support.threepedals.com
support.intellitechsystems.co.za
support.caprarotechnologies.com
support.intellitechsystems.co.za
support.sreeveniv.com
survey.naft.com.sa
support.firstresponse.solutions
support.jumbish.co
mail.naft.com.sa
support.tilopay.com
support.swarmrewards.io
mail.naft.com.sa
suporte.pizzattolog.com.br
support.intellitechsystems.co.za
websupport.cosmickmedia.com
support.intellitechsystems.co.za
support.ehakkexpress.com
tsmsupport.lenovocloudsoftware.com
suporte.pizzattolog.com.br
support.evareg.com
cpanel.naft.com.sa
support.threepedals.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
tsmsupport.lenovocloudsoftware.com
support.cymetricx.com
support.ehakkexpress.com
soporte.tecnocomprascr.com
support.firstresponse.solutions
naft.com.sa
support.vembu.com
helpdesk.fibraforte.it
help.odce.arizona.edu
binance.dlocal.com
support.intellitechsystems.co.za
helpdesk.ga-integraciones.com
help.slice.lol
naft.com.sa
support.jumbish.co
staff-kb.profilegorilla.com
soportesistemas.uaa.com.ar
support.ibaia-immobilier.com
cpanel.naft.com.sa
ticket.savvyhawk.net
support.intellitechsystems.co.za
staff-kb.profilegorilla.com
tsmsupport.lenovocloudsoftware.com
support.sreeveniv.com
knowledge.telware.com
support.lpros.biz
survey.naft.com.sa
support.vembu.com
fuv.citek.vn

Certificate

The complete raw certificate details for naft.com.sa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwYpzC8xVzMUwnnNyBlI
2N7XpdezVJgABZeC6TyJ1a3MrznKEjMHCcC4ZzdmEra11EEwkfl4tHdd3C7IyT5p
j+ucFbtTyH9Ql4gsfjKsmQZiTMWOyFMwbX4FHxIFuEjYwS/aDP/we2zvsVA45jqf
YVccZyE6k+BgrtuAub5oVlbuu2z40HTRKzTfdrXxiOSQ3J3TTA8FHQJVI2GR1RmW
/mL30N1o2kZGIijXs4A1yJLaHyvEmyZ+thoiUuMawyg+9nXGDsEBWBMAqeKnZzMs
ey0eco4wbcsoMXYcnTWTNV477B2RXOG7xzlNPH+gvaN+wuGOmUEATieNJmpxzC6y
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17111858729780859827063748415607838434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naft.com.sa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23104649031414238353126750859096740331039791665095652281081690838464693802077021505757304775147631968506351223668788758307667436160320950329419806939029232129669762507698626467962966465701155626388857815553928137416423519220879325989026660581855417156778383629868124871451589159145107613508473571804503058543139146421623887781254041718773409221460488014635974988378806772140405609341594139219012708539118348687305778198917076811041357418647850738862022572938162539784711638936390311506472111704600913942892458362198111976106563409592736971814855546819700126210505610446222598057672184024131397832150671120761164313129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6183b3a750ad642d7c5df1aee35eb84f6716dd4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naft.com.sa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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