kfc.hu

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:6e:c7:4c:16:49:8f:d8:e4:a7:26:a1:5f:56:a3:cf was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kfc.hu

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:6e:c7:4c:16:49:8f:d8:e4:a7:26:a1:5f:56:a3:cf
Serial Number (int): 19184386823176732126577086011001971663
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e0:e9:ff:f9:c1:52:c8:d3:3c:c0:fa:55:8e:eb:49:23:08:1d:dd:e0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 29:18:d2:23:a8:1a:33:58:5c:89:2f:f6:60:7b:23:36:05:e6:34:3a
Fingerprint (sha256): 60:15:0e:cd:6d:2e:ca:da:44:bd:c7:d2:89:90:6c:c6:4f:94:52:36:75:ce:6f:99:e3:90:5f:81:88:82:71:a4

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate kfc.hu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kfc.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kfc.hu

Other certificates including the domain name kfc.hu

(limited to 100 certificates)
www.kfc.hu
www.kfc.hu
www.brandlift.hu
piknik.kfc.hu
jatek.kfc.hu
jatek.kfc.hu
unnepinyitvatartas.kfc.hu
pepsi.kfc.hu
superbowl.kfc.hu
karrier.kfc.hu
unnepinyitvatartas.kfc.hu
jatek.kfc.hu
www.kfc.hu
www.kfc.hu
brandlift.hu
unnepinyitvatartas.kfc.hu
krushers.kfc.hu
superbowl.kfc.hu
jatek.kfc.hu
kfc.hu
kfc.hu
mbgvyp.kfc.hu
jatek.kfc.hu
www.jatek.brandlift-ssl.eu
unnepinyitvatartas.kfc.hu
kfc.hu
jatek.kfc.hu
karrier.kfc.hu
kuponkod.kfc.hu
ph.foglald.hu
unnepinyitvatartas.kfc.hu
pepsi.kfc.hu
pepsi.kfc.hu
unnepinyitvatartas.kfc.hu
www.kfc.hu
kfc.hu
brandlift.hu
unnepinyitvatartas.kfc.hu
beta.kfc.hu
jatek.kfc.hu
www.karrier.kfc.hu
jatek.kfc.hu
karrier.kfc.hu
pepsi.kfc.hu
www.karrier.kfc.hu
jatek.kfc.hu
www.kfc.hu
pepsi.kfc.hu
brandlift.hu
pepsi.kfc.hu
jatek.kfc.hu
superbowl.kfc.hu
jatek.kfc.hu
jatek.kfc.hu
www.kfc.hu
brandlift.hu
brandlift.hu
superbowl.kfc.hu
mbgvyp.kfc.hu
pepsi.kfc.hu
budaeyecenter.com
sales.brandlift-ssl.eu
jatek.kfc.hu

Certificate

The complete raw certificate details for kfc.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNioZ6mjYBQdxo2RafdE
LoQk0tUyr94OiDEyl2jYkqT5kZ6Whl/FhC/IdxW82dIfXGlck4LDBrM+AeFhGSSx
kXXth1nfUK6HUb5VrUewyVbPD17hUawsiNzLXDQ8+38lMF251dSvXH+Q5OZV43kq
zqb6YT6JPcQ+oW1NouydOnAQ2rMmdRcaqosSCbJF2+Mi2lucjMLr1wYPyc/hluuV
hkUntUX30JxB/gslnvZgoBhnKUxwVFnZaI8AY7NA6NlTN6tY6W1YGbH85qIEqn70
6jJFpBUDMSzVudZvh6XPHMtddH/ssIWeBSx7d/VSoOo9GmjGIn+FWzokPeOIijDR
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19184386823176732126577086011001971663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kfc.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24344592512232568345805341442455996663422292331982212752889695748292910101863935824449643423967078195511515053643848681738605682093420194519162517750417254451191692028870108314133892506970503694466949513644297343521030209081604335308545523893226495270338528372819721284955620431686586398108062401396998355381566027095848417075120357518256340264129450439978453121190158715034801003452811507348191998707800334424212512209208608001627100242495632035844442404473422820748600680374991490177561431982620489680324346842632235911203049952597334301281606101581198823885889760775109750721449451527660892783726053409245692482041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0e9fff9c152c8d33cc0fa558eeb4923081ddde0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfc.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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