userdomain05.pixnet.work

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number 12:e7:ee:05:af:ab:95:8a:f7:73:de:0c:72:9d:f4:0d was issued on by Gandi.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=userdomain05.pixnet.work

Gandi

Organization: Gandi
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 12:e7:ee:05:af:ab:95:8a:f7:73:de:0c:72:9d:f4:0d
Serial Number (int): 25130352162443821793318617010122126349
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 69:8b:69:bb:e6:0e:1e:ad:2c:88:56:40:c2:a5:ee:87:f0:63:18:4c
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): e3:91:fe:11:5f:e5:70:d7:e2:eb:f3:df:d7:b3:cd:9e:70:b9:fe:ce
Fingerprint (sha256): 59:4b:9e:ca:13:c6:a0:9b:f8:9e:e3:c0:e5:5f:0d:e6:41:63:65:b5:8d:fa:3e:fb:cc:81:31:4a:d4:91:26:69

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate userdomain05.pixnet.work

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for userdomain05.pixnet.work

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

userdomain05.pixnet.work
blog.jingtour.com.tw
bluehawaii.dev
chengnill.idv.tw
kwytlife2019.net
lslbeauty.tw
massageisgood.com.tw
nn9319.com
www.chloestyle.tw
www.ezrelax.com.tw
www.qpjj.tw
www.sunnyday-laboratory.com

Other certificates including the domain name pixnet.work

(limited to 100 certificates)

Certificate

The complete raw certificate details for userdomain05.pixnet.work in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IZxWouSpCkZgcDSXjln
NyMnzeNGzt+UrES8Gp64/Q85e2hdPpdyRMiJ/Olg1e00vXb+3Ke2HXX04XiI+CzS
w0XdCEffIhKjr3L8Ro/qYUmuYAIzhDcbkIoO0LykD5WrZacqV44j9ePS4EnYWQY+
iHicbZDvG7o4d+TWQmhkHTgFKVrsNze7uG/ILnILlLoSyeMEBxVudshl0UILyWwf
09atRxj0EqWlC8oGrmwGHkepu88MWvwYSr+RSOr2XQHtgqZ5te6DnjP/ZA24iywB
IAkJUUL/4mJkFWuFhTh+ZfgwC/+NYufwXcH+nbTs3ycllhKabe+u79MkKJk9T9G/
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25130352162443821793318617010122126349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'userdomain05.pixnet.work'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28848629741848801558800617867606238358332224455503896859656942183015949220411252519614895979503021160399757178305094840223201125344622302906917620540320235454012053618070220980670598809384601637941710015423341160073228654731519702491170571032415106803489683809963925702494399348248524683587729767105945639211384218178758186836403393449094994332127578749142680066940338491257197551901258368223530390228911467567211425620448675987446005588264979223777165452911670953238160520282388111362629883959185666925506373544667132436348221170193920840498684717132189067889469288368534765637281727177695080657026571659346338496407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							698b69bbe60e1ead2c885640c2a5ee87f063184c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e115380ad0000040300473045022020db301991954c195e22c4c95dcb96cc5294b99c3cab6d291d266cb7c0512d4d022100ab0973da4a33f3b2cd34d268142f77f7932db55aa8df2f51bae3040f781e87fd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e115380680000040300473045022069aa05fa61f2a92fe3834ee479af11b8fa3e5eccac24b4e0868c1361fbb6cd750221008be47fcebd8211452f7f75bb509a1f36c6714587b8979f4fcfed125a8e84d539
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userdomain05.pixnet.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jingtour.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluehawaii.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chengnill.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwytlife2019.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lslbeauty.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massageisgood.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nn9319.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chloestyle.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezrelax.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qpjj.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnyday-laboratory.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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