*.dpg.lk

- DAVID PIERIS HOLDINGS (PRIVATE) LIMITED -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 03:fe:42:b1:98:ec:b9:9e:ca:5c:57:08:48:65:cf:84 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DAVID PIERIS HOLDINGS (PRIVATE) LIMITED

Organization: DAVID PIERIS HOLDINGS (PRIVATE) LIMITED
State / Province: Colombo
Country: LK

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fe:42:b1:98:ec:b9:9e:ca:5c:57:08:48:65:cf:84
Serial Number (int): 5307880099169104424633924672802901892
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 42:9a:08:fb:79:df:14:94:cb:a5:88:16:8f:e0:ce:d8:a7:8b:ec:7e
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 66:59:d7:49:94:11:df:63:ae:14:02:98:0f:21:dd:51:3f:45:1d:35
Fingerprint (sha256): 57:6e:42:01:39:df:9f:5c:83:cc:93:8c:db:2b:a2:38:7c:32:fb:41:67:61:83:de:d0:60:3c:59:63:d3:d3:cb

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.dpg.lk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dpg.lk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dpg.lk
dpg.lk

Other certificates including the domain name dpg.lk

(limited to 100 certificates)
*.dpg.lk
link.psu.care
fwms.dpg.lk
erp.dpg.lk
*.dpg.lk
tju.strongline.smplabs.com
link.dev.moodby.com
*.dpg.lk
chateaudelaroche.eu
mxt3dspins-cert.3dcloud.io
mxt3dspins-cert.3dcloud.io
www.barkiri.co.kr
*.dpg.lk
*.dpg.lk
*.dpg.lk
*.dpg.lk
webmail.dpg.lk
macspoon.com
*.dpg.lk
postroom.app
*.dpg.lk
*.dpg.lk
www.papperoger.com
ribeiroribeiro.adv.br
link.psu.care
appy.backslashdemo.com
*.dpg.lk
*.dpg.lk
*.dpg.lk
*.dpg.lk
*.dpg.lk
*.dpg.lk
donneargent.fr
www.videogamedle.net
www.sudhanshumishra.dev
www.ineffe.com
*.dpg.lk
dpg.lk
*.dpg.lk
ribeiroribeiro.adv.br
*.dpg.lk
beta.cecomand.com
*.dpg.lk
webmail.dpg.lk
webmail.dpg.lk
*.dpg.lk
fwms.dpg.lk
*.dpg.lk
macspoon.com
brillaenlavia.com
*.dpg.lk
de.healthis-choice.com
webmail.dpg.lk
www.artificialmotorsound.com
*.dpg.lk
admin.blackaxetech.com
*.dpg.lk
growyourfame.app
growyourfame.app
foosey.app
*.dpg.lk
*.dpg.lk
boardpac.dpg.lk
*.dpg.lk
*.dpg.lk
laststop.net
foosey.app
app.tooddoc.com
combine.bcase.solutions
empoweredconversations.org
www.lucite-spirit-of-colours.com
auth.remotely.fm
*.dpg.lk
occser.com
*.dpg.lk
*.dpg.lk
boardpac.dpg.lk
webmail.dpg.lk

Certificate

The complete raw certificate details for *.dpg.lk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/CuQBOAzR23I/IxEtT3
wuHYAG2zV5bo+ZNCi1Gc35+BUfJPUB0PAyLXeyw5Kbj7Ge2qHF98Gq84GP6LlT3c
s5KDbmf50IefE7zhrAb6RJan783mN0yQLvG9trg1HM20Gd6N0Ufbkr2sdJ6SVCtQ
59Ezc5H1hDjRzddkF2ABkVFjGtN63M5iDcsgBhgcWbbHCXOwYxdyHIldo5Z3tHH2
A1b476EiOxH5/hlvLAcD8rHpUOmr2DfA3QK9UkrHc6STB6DdhnbNDmGPjjLVLSgX
blaxJSJEDW4K9BhpjCODqtNHV4LvzSIuLyXUfy7MriWPgTx4xQ0SxaOIDNUMjMTp
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5307880099169104424633924672802901892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colombo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAVID PIERIS HOLDINGS (PRIVATE) LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dpg.lk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29784685726461684524350942933920457513456403591900574573620178577183424763713651804843398642820602745683595777051105649557445952268944519183787469377207746843430932500261009742343289891559807973706552685801079418286836807568748894793875977318348789583006250166781160551950169660826468258721485394969441675046048852863042830244511193782559952224071001079513605006908821231457577647753879447008850355747408882690446394864512212708895047032177990276600656662446736243411991900927694154014803078878230536296235774605218572016844068841213824334197107469067777675360898780664356595276536541323739281914436368965068696906113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							429a08fb79df1494cba588168fe0ced8a78bec7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dpg.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpg.lk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008519332d0c4075e20cf0147050a84c974e9cc865b9338d91e6dcc595605bbc718820b991accb26bca33e16962000d7e0f0d1b9ae1d36b2fdf52c5cb722c0bf9693a83ac7289a9c38ff8639cb8028315a36e65fb1ab4f228601008584ae5865a2f6b235a39cb46a4664abac0be1a41f3d63442a438cb8c207b86a235c76525d07d8856fc9ce4dafc5960bb935fac90aeea764a223d971d254792a983ecfadd5c41c83028be49c8d82f09841d07e357156f17e4c06b1349555dbcc4a61960992c580b12d16d71dbd04172975650898a07837f74de0febb4dcb19e7eb8b7005a184623608dfc040ab7914216d18c73804e24a5f2c3062a3bb2d18ea71d8491333c9