ucr.gpax.io

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 12:df:f1:28:70:c4:b5:c3:0c:77:e9:cb:8c:f9:34:da was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ucr.gpax.io,OU=Domain Control Validated+OU=PositiveSSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 12:df:f1:28:70:c4:b5:c3:0c:77:e9:cb:8c:f9:34:da
Serial Number (int): 25088877388322861803558555301480838362
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 04:fe:d1:96:77:a7:a9:d0:be:0c:24:ae:9d:1f:89:50:cd:24:1b:4c
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 89:73:41:77:af:18:85:c4:59:92:86:67:f2:83:5c:2d:66:6d:ec:d4
Fingerprint (sha256): 52:ed:d5:62:ab:cd:70:fd:3e:94:dd:46:3e:27:58:ab:f0:cb:dd:59:8d:72:27:c5:b6:8e:53:5d:fe:fb:ad:09

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate ucr.gpax.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucr.gpax.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucr.gpax.io
www.ucr.gpax.io

Other certificates including the domain name gpax.io

(limited to 100 certificates)
gpax.io
it.oodc.com.ph
gpax.io
support.emeals.com
soporte.cjgconsultores.com
support.akylade.com
it-helpdesk.hccom.org
it.oodc.com.ph
it.oodc.com.ph
desk.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
support.spidercost.com
help.tradetechnica.com
aide.leo.solutions
support.shopfloorautomations.com
support.cosmicktechnologies.com
it.oodc.com.ph
support.cosmicktechnologies.com
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
helpdesk.al-mozon.com
support.45z.net
helpdesk.ie-launch.com
help.tradetechnica.com
support.thebestclaims.com
it.oodc.com.ph
support.cosmicktechnologies.com
it.oodc.com.ph
it.oodc.com.ph
support.foodaccessportal.org
support.45z.net
support.cosmicktechnologies.com
support.cosmicktechnologies.com
helpdesk.trylon.ca
it.oodc.com.ph
it.tnsos.help
it-helpdesk.hccom.org
support.cosmicktechnologies.com
zoho.cvnt.net
support.cosmicktechnologies.com
it.oodc.com.ph
support.primaxis.com
gpax.io
support.cosmicktechnologies.com
support.biz301.com
it.tnsos.help
support.cosmicktechnologies.com
soporte.cjgconsultores.com
support.cosmicktechnologies.com
support.cosmicktechnologies.com
agent.iqsupport.me
it.oodc.com.ph
support.cosmicktechnologies.com
support.apexuniversity.net
soporte.cjgconsultores.com
test.gpax.io
asistencia.soporteparati.com
*.gpax.io
support.cosmicktechnologies.com
support.cosmicktechnologies.com
ucr.gpax.io
zoho.cvnt.net
gpax.io
support.gpax.io
it.oodc.com.ph
soporte.geeksolutions.com.mx
support.klutch.software
it.oodc.com.ph
it.oodc.com.ph
helpdesk.al-mozon.com
support.cosmicktechnologies.com
support.cortexghana.com
support.45z.net
it.oodc.com.ph
it.oodc.com.ph
support.cosmicktechnologies.com
support.spidercost.com
support.rapguru.in
support.thebestclaims.com
it.oodc.com.ph
support.getcc.us
it.oodc.com.ph
supports.amberwaves.info
support.cosmicktechnologies.com
support.cosmicktechnologies.com
support.cosmicktechnologies.com
support.cosmicktechnologies.com
helpdesk.ie-launch.com
it.oodc.com.ph
it.oodc.com.ph
support.foreststrategicsolutions.com
support.cosmicktechnologies.com
it.oodc.com.ph
support.beekast.com
support.rapguru.in
asistencia.soporteparati.com

Certificate

The complete raw certificate details for ucr.gpax.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OAfPtnLDTdFr3nGzzFN
5sUFAk3gKaxBr4Bb3eQ90UY26zxC4wzwrC3en1Iq/30EePilnxwM+7aQDtgAXIRy
uvpxPW917TORbQm3AaAhaN7EZr3zVpxulBTFHQpG5gKaffaXWGqTwJbBr7bSPExb
gbpAsvzCig+hM5JDHKBAA2nrw32dDCYHxPxvQ7qCNpXDdHEN8wP5BDO83rnWrPpu
wnZoDcys3BradkM56hUhRBwWhjiLHflAQzGpwfgs0Ll6oXmAsayj2oZPCgFyGEVY
53SLKj+JBefOQ9FHnekZtE5u2U/15TUpAdtA9XxPMdbuemd8NXfW4tfvBg33PMT0
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25088877388322861803558555301480838362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucr.gpax.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28892852235573893536105583994148464720778460938075470163658611327645016997116784159297049921519759108895079649293247338652900896660327503431956064874133116062730335498546319735882967758595651258531421533057936049825395929234088975251337332399156046586012753782147650709594980722643562170209573777544999881528516156440480952588756271321271646327827711281965398820601208294726452408629769574237633319488733101719775206856640563052842196657367536081413579562292270589682102156949120156321096383851622418223440401284787194776981247742341268881350253426917917767592472618529429669403206444094692231784506542914762868847697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04fed19677a7a9d0be0c24ae9d1f8950cd241b4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucr.gpax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucr.gpax.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169e471cb60000004030046304402207b5417af6683a59bb20010aabe3bb8c2c3ffc350e024a125d02c4694776e2aff02201ddaeec5cad100a95d88cf5ac10d539bf7b06e078dd3a5576508d8b8985cef3a0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000169e471cb760000040300473045022078aa23d61a1bf85173aac59a1be887ac3044079209194a56751778e549e3c3b0022100da4e90188777314c973642615604dbc963557ab23fedd01e036048a93457f5ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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