*.nohum.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 85:2d:a0:4b:40:cf:01:bd:3b:cc:62:bc:72:37:70:78 was issued on by Sectigo Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nohum.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 85:2d:a0:4b:40:cf:01:bd:3b:cc:62:bc:72:37:70:78
Serial Number (int): 177024227945733947662919715371399737464
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 83:49:7e:36:76:e1:1c:1e:a9:25:5f:df:a0:29:b3:b9:08:2c:8a:ca
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 69:6a:38:63:18:33:6c:22:f1:e0:3d:ee:a2:9f:a1:dc:82:4a:82:3f
Fingerprint (sha256): 5b:e9:36:44:6c:36:2b:6a:54:16:bf:1d:59:98:6b:e5:0c:97:f9:45:b2:29:ca:91:82:6e:06:cf:de:88:c0:f6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.nohum.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nohum.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nohum.org
*.nohum.net
nohum.net
nohum.org

Other certificates including the domain name nohum.org

(limited to 100 certificates)
abcusd.us
arcatahighschool.nohum.org
www.lighthousecs.org
nohum.org
careerprograms.comoxvalleyschools.ca
abcusd.us
abcusd.us
www.armenianpreschool.org
nohum.org
phcsd.org
admin.nohum.org
admin.andersononline.org
lighthousecs.org
nohum.org
advantageacademyenroll.com
admin.advantageacademyenroll.com
*.nohum.org
admin.blms.lex3.org
www.athlosprep.org
admin.madriverhighschool.nohum.org
www.firstodessaacademy.org
arcatahighschool.nohum.org
nohum.org
abcusd.us
www.tulsalegacy.org
arcatahighschool.nohum.org
admin.monessenschooldistrict.com
richgrove.org
abcusd.us
www.fayettevilleisd.net
admin.rmcacs.org
admin.andersononline.org
admin.arcatahighschool.nohum.org
admin.ps290juanmorelcampos.org
arcatahighschool.nohum.org
admin.bcsd.com
admin.blps.lex3.org
*.nohum.org
edtech.nohum.org
mckinleyvillehighschool.nohum.org
nohum.org
edtech.nohum.org
pacificcoasthighschool.nohum.org
nohum.org
admin.mainlandregional.net
admin.mckinleyvillehighschool.nohum.org
madriverhighschool.nohum.org

Certificate

The complete raw certificate details for *.nohum.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEh0o22WcRZkjN206i8K
RMq0UaeTywVceoYgtc6oiwPyDD775UKJk9L8nak19U/kBOWFIxqLQB7V1sv8gFvW
tMlG9PETCdpiiy94fT5cu+ZqqLzvM5VDjWta1zETCIx3zMkbUCTEv2n+a+aK7Tb5
rqlibvXHcYgBGS+brghM2dWHLvx4saEHIf8sE0CE+4MVkEd6df+APgDrI8+8IcGm
E0IccbwdtvUzKB+MVRi6JROALTfk4eodx8csBM6soOO3tb6o7jQTKQY4hVCKiY8S
E6u/3OA5sOlebOH3BB6k7fdmAmq7k1G11+tBE+26R39mGJAzcpLS64SK8uRylXiN
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177024227945733947662919715371399737464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nohum.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22758624091124114285961617602963502762412063598278292961335828310260448841356410505710363036389029261607595168894299106290090553804008711458853827835652545180900955435186659913274826243021198587621297119178440192928185005955077590488030837343087085436254718284637114072673198248716447432527000751523209394971437668089449851130178403403388905923898222882583452211239335036003164372460565168999222387902184298831373258004829571403884760653063257576873253617388893654485798519960705832781972825680846168711495317303132619636151312382163245849665198429606244393657755899034764840849651269413163805409392793470929991142717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83497e3676e11c1ea9255fdfa029b3b9082c8aca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nohum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nohum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nohum.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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