*.cra.gov.qa

- Communications Regulatory Authority -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:99:b5:f5:9b:82:3e:b7:3b:4c:5d:bd:be:5a:1c:3c was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Communications Regulatory Authority

Organization: Communications Regulatory Authority
Locality: Doha
Country: QA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:99:b5:f5:9b:82:3e:b7:3b:4c:5d:bd:be:5a:1c:3c
Serial Number (int): 7444251973446117984401030178418596924
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ce:b7:87:9d:c0:92:ab:45:6c:64:61:5e:18:44:d8:83:db:b4:53:c7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 7d:5c:1e:8b:ca:24:45:f5:e7:40:39:8c:42:c6:76:71:4d:34:6d:d3
Fingerprint (sha256): 56:83:d2:14:e8:32:62:e0:49:38:99:de:a0:92:dd:76:1e:be:bb:8f:ed:64:83:b3:1d:b8:35:3e:84:03:7f:34

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate *.cra.gov.qa

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cra.gov.qa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cra.gov.qa
cra.gov.qa
craintranet.cra.gov.qa

Other certificates including the domain name cra.gov.qa

(limited to 100 certificates)
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.fbgfoodtours.com
*.cra.gov.qa
securityawareness.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
evarchive.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
survey.webworktools.com
survey.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
survey.omnihrc.com
*.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
survey.omnihrc.com
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
learner.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.chivib.com
e-spectrum.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
survey.chivib.com
mail.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
learner.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
evarchive.cra.gov.qa
survey.chivib.com
mail.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.fbgfoodtours.com
survey.omnihrc.com
*.cra.gov.qa
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
securityawareness.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
survey.webworktools.com
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
survey.fbgfoodtours.com
s-spectrum.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa

Certificate

The complete raw certificate details for *.cra.gov.qa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45yppE3qt3nGEZca7Xr4
CGZnuhZZyK4KV88nBAMCx2QuyYWhrzTXJ3v/Csc/i7819CsX9DVc1qqQzf/tJd2P
4ClxZ4Zz4UC5IPw3TUNfdWFP7wBgx6Vz9w4mU0fJ+FD/lFyqxhiA0liyLOFy/ELw
zAjRHlgqFLw16f0xQ+wR43WgOrHZm//EXrBJJz9sCyGjoZO7R1YU5mgvUoY/COhr
bJuz71Oag0HcFVIcIMKvAjX8VyVnBkxtp3pfIp568D5mxi96YGxpr64twqPkO4HC
q0GlU+P9BXPmqcso18Clgr7SqnWjFcZLBgkZBYrcLR6ZeKEq+F2bugWerBmIW4QI
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7444251973446117984401030178418596924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Doha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Communications Regulatory Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cra.gov.qa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28733348465853729528776219110707762062823147487007820102248994309698483028628849928990650237165737476328741507831533550224859300399953131693683335569063130146763555080945673188786179770081318984397889548986042868696779678420036717414121531902270629891607645782137286781716170519541015481437904582839404428811457571176652060156767277600446891156618830221524831801442478555725886236475702840570080055021600408440442941799881094546624175231254015059764637536239220001007186112773182427711969731262478946023675291257300554706345161852800937112616540341955846694758948788699358913777003735746265740701437558809274062473311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ceb7879dc092ab456c64615e1844d883dbb453c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cra.gov.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.gov.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craintranet.cra.gov.qa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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