www.montana-cans.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 19:86:4b:83:92:bd:47:61:96:1b:48:7b:92:7d:4a:a9 was issued on by Sectigo Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.montana-cans.com,OU=Domain Control Validated

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 19:86:4b:83:92:bd:47:61:96:1b:48:7b:92:7d:4a:a9
Serial Number (int): 33927999278689762470722606281338473129
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 34:c9:7a:ca:b3:04:54:81:52:44:87:bf:35:dd:a8:38:1a:80:b0:31
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): aa:eb:f5:a8:d4:93:15:be:5d:86:cb:40:26:d1:e5:9e:17:db:a5:16
Fingerprint (sha256): 57:d0:27:fd:55:6f:20:48:94:9f:c5:30:10:01:58:c6:ed:98:46:d1:41:70:65:29:82:a3:e1:79:e9:5f:24:6e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.montana-cans.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.montana-cans.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.montana-cans.com
montana-cans.com
montana-cans.de
www.montana-cans.de

Other certificates including the domain name montana-cans.com

(limited to 100 certificates)
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
kiosk.dolcevita-magazin.ch
catalogs.k7-pro.com
www.montana-cans.com
downloads.berghaus-verkehrstechnik.de
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
magazine.montana-cans.com
downloads.berghaus-verkehrstechnik.de
magazine.montana-cans.com
webkiosk.ghoztmedia.com
downloads.berghaus-verkehrstechnik.de
montana-cans.com
moegro.mediaflip.de
www.maryspubs.com
ruesen.mediaflip.de
ruesen.mediaflip.de
webkiosk.magazinmarley.de
moebel-zuck.mediaflip.de
trop.mediaflip.de
epaper.audimax.de
angebote.dersteirerhof.at
magazine.biss.team
read.africanphotomag.co.ke
trop.mediaflip.de
webkiosk.ghoztmedia.com
katalog.seglerbedarf.de
montana-cans.com
kiosk.leuchtfeuer-verlag.com
kataloge.triplex-fischer.de
sonavsofab.xp1.com
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
magazine.biss.team
kataloge.holzimpraegnierwerk.ch
epaper.sinntec.de
montana-cans.com
trop.mediaflip.de
moebel-gruber.mediaflip.de
katalog.hltravel.at
proxy.montana-cans.com
immomagazin.wegenerimmobilien.de
webkiosk.edeka-koehne.de
ruesen.mediaflip.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
webkiosk.magazinmarley.de
ruesen.mediaflip.de
brochures.adipec.com
catalogs.k7-pro.com
logo-moebel.mediaflip.de
brochures.hts-touristik.de
catalog.triebel-guntools.de
biblioteca.sciens.com.ar
moebel-gruber.mediaflip.de
magazine.biss.team
brochures.hts-touristik.de
mobila.mediaflip.de
kataloge.werbeartikel-laeser.ch
magazine.biss.team
magazine.biss.team
webkiosk.werk5.ch
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
trop.mediaflip.de
magazine.grossglockner.at
magazine.biss.team
read.africanphotomag.co.ke
moebel-gruber.mediaflip.de
moebel-brameyer.mediaflip.de
epaper.audimax.de
moebel-seesen.mediaflip.de
www.montana-cans.com
katalog.hltravel.ch
magazine.biss.team
brochures.adipec.com
kataloge.otto-pokale.de
kiosk.tsg-reutlingen.info
ruesen.mediaflip.de
catalogs.k7-pro.com
ruesen.mediaflip.de
prospekte.wernigerode-tourismus.de
webkiosk.tkmparkett.de
webkiosk.mediabiz.at
epaper.uehlingerag.ch
epaper.uehlingerag.ch
webkiosk.ghoztmedia.com
katalog.hltravel.ch
webkiosk.ghoztmedia.com
catalogs.k7-pro.com
epaper.uehlingerag.ch
www.montana-cans.com
www.montana-cans.com
moebel-brameyer.mediaflip.de
katalog.seglerbedarf.de
trop.mediaflip.de
www.cloud.montana-cans.com
ruesen.mediaflip.de

Certificate

The complete raw certificate details for www.montana-cans.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0/C+eHwBVF9hX14AKO1k
w59l7jSHhqpvbxFkZuegbNiN5LhyuS21/YUxjY3uj6i7u4qAUNnoLUA7PYz8KIZe
HgFyPZg//paJYQ8dbf1cx/7x5yyyrIHuZXl8phovAZgr7Rdbg5JSM+xeHG3s5ZSD
L0tLQ52C0TQfnoeqUIc/vQgJSdq62Op/xlnpUU18Xk97g5GYVJgJhd/tNXc7a7/y
2MTJ++vtfdJrK6WQJYL9dX5rMHdc6725yozsOIeYktDRipKeteHXSeWS3fWgrsfw
RgDWCo/Plr8m/m6tUaaj970C5zviHCIYZDpKN4fgxLaQY0DhZVYy0EpBVoHjqyxC
At5MMNo06bubV+vh+G09lUnXGOhVaWfQuj3E1vlleSV4yOoGf0gKBQi8cWlgHH6d
vmIbOTP2Sx4qT0bKVJm5XgMWA+/uki2in4StNz/EIu+OYnyAToezhLVH++tALjWz
sWSL/X8U6YrhifhWyZ55HhLG9l9NuWQQt1SNrCWV5S+ul7H85FNBGLEYpw8BFYmv
p65fPi3X8mVL9/KOfgGSdd7caSkAwwBc0e4+WdXSIiMCbQtEEFVEcOVg/omJ55pd
nvcrWgXdZazJUDu6qd/91hwpfX+TL/6cS9+0xfLYtarSJOynNFsdkxalYKnffZpA
nkjIPSbaAVERnxc3EvUwLk8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33927999278689762470722606281338473129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.montana-cans.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864641421545066215930744404975399666631615218065497675490523312386688772074500513073849663696961404000686699632821304596397146618244257302439037397000519961117266280071634805644536659305432789173713036199150371167653307268879812803290677575523379866777391845948731006670551754084447131977859818602003625026524369294496241764965448713716006194248731931242296130309907443298219622222742236503823865301796500908914904217197884629870697517764469975963769441836759942376882132531173520491784985027971920186680185283566128344148131584019075314245314223548868835488777524639702567112708017811583230922277341332259129608770632525468202671409640634483425814864096368299564473635507352999376375933288488940626374720762243111268209399531735445003077817473013971210115108410399825901439992507556795650414441467306937411083922996630724437844471820672442857944716380977157719848970445592648165902529637972846962008473583865142948290327376149742718851692303035996696956939468398858493484949608143041724732989681240244614405667146757355518672498787650411115123159480609563328690694690774628082214610002701080631235138864820694543058851155631764234905768138147917006003394067212104695466600862366684185888793115765058231683295394736132705288895606351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34c97acab3045481524487bf35dda8381a80b031
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montana-cans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montana-cans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montana-cans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montana-cans.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d156d6750000004030046304402204517658ca8a9bfb0013e8f2b29d6bdea88ba66b7ea5343ee984c798d2331b2ae022071d0b9ef5bba9e2087def93d487c76a15333bde4e36c83a081924cb8ab49ee0e0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d156d684b00000403004630440220444ea4127bf8e55c7ed05e7c49c8e420cf39728e8ed329d7febe37f88efa2270022035bb391ef0ad2d5e60c2fde64bae480e898c8cbd9d41b0fcbe1357f271fe2f220076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016d156d67480000040300473045022100c0596f3a020913673417ddc123db178b6b40ebde6e89504ce7aad569ddc88ac3022023e57f37b63ca4bb2cf9d4123532ee7b09f0e9e3719902eeb971160f98057ee7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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