*.monoqi.com

- Things I Like GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:5f:1b:76:a3:f0:27:b6:87:b8:c1:e2:2e:55:db:65 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Things I Like GmbH

Organization: Things I Like GmbH
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:5f:1b:76:a3:f0:27:b6:87:b8:c1:e2:2e:55:db:65
Serial Number (int): 13786105184128828969008540671439919973
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:9b:68:36:23:f8:5b:35:8d:ef:fe:53:52:5f:12:d6:be:f8:df:84
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 22:58:1c:26:44:fd:9f:5e:c5:e8:5c:84:bd:c7:9e:e1:ad:6e:b6:03
Fingerprint (sha256): 56:12:1c:35:cb:a6:d8:3e:f4:88:85:26:4e:9c:d3:e8:47:be:0d:3b:e1:7f:c7:b2:23:d5:07:4d:a3:04:3a:70

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.monoqi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.monoqi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.monoqi.com
monoqi.com

Other certificates including the domain name monoqi.com

(limited to 100 certificates)
*.monoqi.com
monoqi.com
mei.monoqi.de
mei.monoqi.de
nl.monoqi.com
monoqi.com
kibana.monoqi.com
meistaging.monoqi.com
mei.monoqi.de
meistaging.monoqi.com
monoqi.com
monoqi.com
press.monoqi.com
monoqi.com
monoqi.de
monoqi.com
www.monoqi.com
mapi-dev-mathias.monoqi.com
mei.monoqi.de
staging.monoqi.com
designerfocus.monoqi.com
testio.monoqi.com
*.monoqi.com
testio.monoqi.com
mapi-testio.monoqi.com
www.monoqi.com
nl.monoqi.com
*.monoqi.com
press.monoqi.com
staging.monoqi.com
mei.monoqi.de
www.monoqi.com
testio.monoqi.com
monoqi.com
mapi-staging.monoqi.com
mei.monoqi.de
staging.monoqi.com
testio.monoqi.com
testio.monoqi.com
monoqi.com
monoqi.com
www.monoqi.com
testio.monoqi.com
www.monoqi.com
monoqi.ch
monoqi.com
testio.monoqi.com
staging.monoqi.com
staging.monoqi.com
mei.monoqi.de
staging.monoqi.com
tr.monoqi.com
monoqi.com
mapi-staging.monoqi.com
support.monoqi.com
lp.monoqi.com
mapi-staging.monoqi.com
monoqi.com
cdn.monoqi.com
lp.monoqi.com
*.monoqi.com
mei.monoqi.de
monoqi.com
mei.monoqi.de
monoqi.com
mapi-php7.monoqi.com
*.monoqi.com
press.monoqi.com
www.monoqi.com
testio.monoqi.com
kibana.monoqi.com
testio.monoqi.com
monoqi.com
www.monoqi.com
press.monoqi.com
testio.monoqi.com
*.monoqi.com
staging.monoqi.com
monoqi.de
www.monoqi.com
nexus.monoqi.com
mei.monoqi.de
staging.monoqi.com
*.monoqi.com
mei.monoqi.de

Certificate

The complete raw certificate details for *.monoqi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13786105184128828969008540671439919973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Things I Like GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.monoqi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824814576569925631675356458479677964856317664613741021440035732082337165950159974166322135367746352457031099369047410671842846139828279469939680448443611844722342741745995473462927073191119199473903089518644870961572121250164655948209029129150757476713931542813139239471214331981691191162902519499699984453084041945384006186566052255281436309810447192883383290181967060931219699377795157793508655511955734945745417086138016116555970792738118724686753323963148095087381060399896064971254255210959633255323659235462579913663476240914001642714748518580976048013025743689067422525078611260072441166705123171451791287808264506270926831769664696662215188973179905135836909081677500722287252277491979964418630972673061139948160974953387060107660096019803196661271446998069689194854341001154776631881363818593814069848672098740721527807178768014542352141402616123856421922017019573221662981152565115489128120013681969571209594811765811569347877065362488470401086941462142988214804634925656771459719981268194215284914210576670789947951378942503235130863038083822551811686025595255062893199202272962398354095650248051778471849775109384659438421267007111636429653297543452289884373142992730956444299295843970600418200227841385599505439869748993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							469b683623f85b358deffe53525f12d6bef8df84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monoqi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001617622682600000403004730450221008d0b53607fe3ee743960869738e8d9b12ea77398c0c0f9bb6ed689fd38d4c800022034f9d403d704b5b9b3535de956c1d1a7e44703d82cfe6a97ff6d1475763013810075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001617622690200000403004630440220431454f0f778fbf2073c4aded8d29e9a8f51c89a6de7b7d3e7ccd3065947ca0e02207be1578d1f1da16b2a768d6ede4ef26b9bf43b421a9b12e648b9cff29808e935
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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