magazine.evvai.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0b:e2:46:2a:1e:ba:56:6c:29:5c:20:89:e3:26:9a:85 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.evvai.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:e2:46:2a:1e:ba:56:6c:29:5c:20:89:e3:26:9a:85
Serial Number (int): 15796390149427845477856477738288192133
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:5e:73:fb:20:85:7d:97:dd:f6:46:25:27:0c:85:ec:b7:8c:c9:c3
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): c7:94:28:eb:77:74:fd:d0:3c:7b:21:e3:78:cf:b7:58:9c:ae:84:27
Fingerprint (sha256): 58:ae:ca:36:01:3c:70:08:ae:ed:14:89:a9:09:18:49:e4:52:84:70:25:b8:3a:a0:a7:b6:44:3a:e0:8e:a9:60

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate magazine.evvai.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.evvai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magazine.evvai.com

Other certificates including the domain name evvai.com

(limited to 100 certificates)
www.marco.dev.evvai.com
sgboxportal.sgbox.it
support.eposnw.com
assistenza.edilbruny.it
assistenza.cmstlc.it
support.seosmash.it
*.evvai.com
soporte.fifa23legacycup.pro
support.inovatraining.com
asup.fancom.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.edilbruny.it
support.despeelgoedschuit.nl
assistenza.edilbruny.it
magazine.evvai.com
mailview.verkaufemehr.de
users.digitrame.fr
ticket.widemann.gmbh
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
support.inovatraining.com
assistenza.edilbruny.it
support.medianit.co.uk
www.evvai.com
www.evvai.com
assistenza.edilbruny.it
evvai.com
evvai.com
support.medianit.co.uk
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
evvai.com
www.evvai.com
magazine.evvai.com
asup.fancom.com
support.manstein.at
support.medianit.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.despeelgoedschuit.nl
support.airgp.co.uk
support.medianit.co.uk
helpdesk.dataroad.pt
sgboxportal.sgbox.it
cetec.support.arlian.fr
help.syntomax.com
track.weblims.it
support.inovatraining.com
rh.zagora.fr
support.eposnw.com
support.airgp.co.uk
magazine.evvai.com
support.manstein.at
helpdesk.itconsulting.cologne
users.digitrame.fr
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
track.netherfind.nl
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.les7royaumes.com
support.justin-legal.com
magazine.evvai.com
users.digitrame.fr
staging.evvai.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.cmstlc.it
helpdesk.pumtrix.com
*.evvai.com
support.seosmash.it
support.despeelgoedschuit.nl
www.evvai.com
support.lnmlaser.com
magazine.evvai.com
helpdesk.phc.parts
*.evvai.com
servizioclienti.evvai.com
support.seosmash.it
helpdesk.pumtrix.com
assistenza.edilbruny.it
www.evvai.com
support.inovatraining.com
hseq.naturalpower.com
evvai.com
servizioclienti.evvai.com
assistenza.edilbruny.it
ticket.widemann.gmbh
cetec.support.arlian.fr
support.eposnw.com
support.manstein.at
helpdesk.dataroad.pt
assistenza.edilbruny.it
evvai.com
helpdesk.dataroad.pt

Certificate

The complete raw certificate details for magazine.evvai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+TLLY0KBpC1niMi+VZe
alKGnjB1NDvXcRbQd8bLD1M1JxeoYpGTpmlzkJ3OFwN/qh2t7gjHDyLpFGIojRPQ
TzqGTUYRKtGGjJ+WaB2HbaOuwehx5DSrSHeXZ0Gyp5RANWpb1cIK9260cFIfo3vo
62o1Lq0ePUGfOXuyD3c1E8zdGIraROy46lzvsQ8njo61PHfxO2yqiRJoQ+cn8OGe
1m1FSgUbLXD4liyD8r6u07GCTQKUaOkskN9hTcaCwQ7r4m1uSmFp8SloDwgw17Nm
/f0cWe1gMIZFWxpMput5Ou5JJbyGMxnqG8dpEmKpzwDWrTxrnk77IYKK4n68XFzn
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15796390149427845477856477738288192133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.evvai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20184712850171098319515430982732386419299020719857749360813080791719867611223470806651220733259459515205967088682677757678547756062381355506878453527275090794417308788672296074064872247005539713630935245388086007030236305586124399036918841518179893161460474301563323152884655940803588052112877860199432752691617110788901039924513103618938052945605068034306342278658340780663996662605526837336489602590732212515963171050157214432056886558804200525244202865432987772736185629633874075394792914937735435899209743086937861749056601977679040332147423229736930482445839204229727102666232179729205023383172387337409354590173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							845e73fb20857d97ddf64625270c85ecb78cc9c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.evvai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fae2ff6ee00000403004730450220314890654055dd9569b58109926e64d8b41e8b904acf204c2a12a5f522498a31022100e70a73c57bada6f062169133de819ef73421234e0e788b48a2157a6e504a637e0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016fae2ff698000004030046304402203afec877686972caeae842d4ab296dcae3a9c208b5058f7a294f712e8f9178580220044590e4e516f55477b8b60e4b67d06b1764db7acca4f2da49d15cb822744d20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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