www.parantion.nl

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 58:83:ed:d3:ba:ae:91:12:6c:3a:ff:5a:73:fa:bc:73 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.parantion.nl,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 58:83:ed:d3:ba:ae:91:12:6c:3a:ff:5a:73:fa:bc:73
Serial Number (int): 117657078223534265192901588213365914739
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 00:61:f8:4b:41:13:57:0d:8d:87:33:cd:c7:36:1d:0f:95:83:89:ee
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): ff:5e:8f:7c:56:91:73:08:28:dd:d8:9f:0c:56:02:3b:4c:5c:8d:bc
Fingerprint (sha256): 54:85:a4:b8:3e:6f:d9:ce:32:37:25:94:07:d9:9c:84:87:94:a9:94:45:03:41:ff:41:1c:f8:45:b6:80:1a:0e

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate www.parantion.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.parantion.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.parantion.nl
parantion.nl

Other certificates including the domain name parantion.nl

(limited to 100 certificates)
www.parantion.nl
www.parantion.nl
scorion3.last.parantion.nl
scorion3.rc.parantion.nl
scorion3.parantion.nl
easion.parantion.nl
*.dev.parantion.nl
easion.parantion.nl
scorion3.test.parantion.nl
*.dev.parantion.nl
nps.parantion.nl
nps.parantion.nl
feedback3.rc.parantion.nl
easionedu.parantion.nl
easion.parantion.nl
feedback3.parantion.nl
scorion3.test.parantion.nl
scorion3.rc.parantion.nl
feedback3.parantion.nl
scoriongd1.parantion.nl
*.test.parantion.nl
*.parantion.nl
feedback3.parantion.nl
feedback3.parantion.nl
*.parantion.nl
strapi.parantion.nl
scorion3.rc.parantion.nl
feedback3.parantion.nl
lab.rc.parantion.nl
scorion3.test.parantion.nl
www.parantion.nl
www.parantion.nl
feedback3.rc.parantion.nl
*.parantion.nl
scorion3.test.parantion.nl
feedback3.parantion.nl
*.parantion.nl
strapi.parantion.nl
*.parantion.nl
lab.rc.parantion.nl
scorion3.parantion.nl
apps.test.parantion.nl
scoriongd1.parantion.nl
easion.parantion.nl
scorion3.parantion.nl
www.parantion.nl
easionedu.parantion.nl
www.parantion.nl
strapi.parantion.nl
scorion3.test.parantion.nl
scorion3.parantion.nl
apps.test.parantion.nl
*.dev.parantion.nl
feedback3.parantion.nl
*.test.parantion.nl
*.test.parantion.nl
feedback3.rc.parantion.nl
scorion3.test.parantion.nl
*.test.parantion.nl
*.parantion.nl
strapi.parantion.nl
easion.parantion.nl
www.parantion.nl
easionedu.parantion.nl
scorion3.last.parantion.nl
*.test.parantion.nl
strapi.parantion.nl
scorion3.parantion.nl
easion.parantion.nl
scoriongd1.parantion.nl
strapi.parantion.nl
scorion3.rc.parantion.nl
scorion3.rc.parantion.nl
strapi.parantion.nl
*.parantion.nl
lab.test.parantion.nl
*.parantion.nl
scorion3.rc.parantion.nl
strapi.parantion.nl
scoriongd1.dev.parantion.nl
*.dev.parantion.nl
scorion3.test.parantion.nl
easion.parantion.nl
strapi.parantion.nl
*.test.parantion.nl
scorion3.rc.parantion.nl
lab.test.parantion.nl
scorion3.parantion.nl
*.parantion.nl
easion.parantion.nl
www.parantion.nl
apps.rc.parantion.nl
apps.rc.parantion.nl
scoriongd1.dev.parantion.nl
scorion3.parantion.nl
*.parantion.nl
easion.nl
*.parantion.nl
scorion3.test.parantion.nl
www.parantion.nl

Certificate

The complete raw certificate details for www.parantion.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117657078223534265192901588213365914739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.parantion.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832453448424292976157766984790106472529897078395989519021499489464244174403165671885649150596050340241614183573716183365866683676333409421438820869152369538376276377379182447428453623269751069475307848092322690706750748109203737003348020879496698839851822671886876120937684172712811124897073648987746453560261321317650721007410680601157566916473428713294459053140298424039712007406979966441712742613869327315415918697436370509830760024347660327827692277687162741345129938321109106617387724615220281214066645582365329604680246961511449987793447964724720932682706839084785259805079263840238924124675533958553334077003234639848226768375345579349676221940728644815162540855414550879568980463745723313396332803014646150774612306954022817064249182731196706762697737698658036341222224177013684984607149880459094909679840136102859517061626374254413556929129400439316025824370555188678370878240475197081241947591648807688307553947132315052986277749167759659298102615200733093924463296741531052057279901906179673702630557109510447794761441685505649903065075499568993961756354069949655670845292691955841255848631205643159871104371036861160464579778201272749123531256359363465267405348922833501274374168887560785773361033794007962227940261259189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0061f84b4113570d8d8733cdc7361d0f958389ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parantion.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parantion.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000162fd0c75b8000004030046304402203d5d030e4c7edbc3f10839840db13eb221b61f4ca83891a74dc4ecc6a2f70c0e022047d47195636e01877f4ff8234510ff0a2a3e3ec63d3b7eea02fb30964ae758cc007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000162fd0c76d50000040300483046022100f89ae2fb28215d6e2a6e174e756d1e0e58667a0ec5921110b8f8dee027aebe47022100e21b11e75d13f94d3479206f60ae1e5761c5b7f62a83ae825f0242e18403823c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e6cae2a18f802dcdf85b0929dc98007e46dedb697903c16f99a6c3549834b1ea77d095a051e9bcb0f4e25bb85b4b1f60197cd126db761855feeeaa5327ea5de515a2db3045a264e5870b5a508233e9b4a9363fceb97419eec85409a3bb0d7761b62615fda6f13459856f9901c194034a22eb0a9e46a9da65ef096a3b204ba2d4dde5abdfc6293c331e7420d1dd7068b0d625a963768fcce2951d5883c9388fb450c939cfe2527cf31e60f34cd89a496275ebd0bf0f09fdb485886fdc4dd2027d64f2a6376a11117ad85f361a80523eb8de792a04a422f844e62e7e5b78993d369de5368d6487dfd81113bf90de62714d90e815e1096a07477b6db726fc3c1d8