performancesoft.org

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 03:f0:8c:1a:14:0d:f1:e2:bd:a5:dc:c6:4d:ef:e4:34 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=performancesoft.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:8c:1a:14:0d:f1:e2:bd:a5:dc:c6:4d:ef:e4:34
Serial Number (int): 5236676836886401359324865532393415732
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0b:ff:3a:ee:91:13:f1:eb:0e:d9:9b:1b:94:72:70:ee:47:72:6f:33
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): eb:e9:8e:fc:b3:f1:89:9a:fb:91:7d:af:2e:25:26:61:98:cf:44:1a
Fingerprint (sha256): 60:5e:37:1e:c5:b3:9a:9b:db:4c:3e:24:3f:a3:99:49:b1:5e:49:7f:3f:80:28:a2:6d:4a:4d:55:f0:79:eb:87

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate performancesoft.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for performancesoft.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

performancesoft.org
www.performancesoft.org

Other certificates including the domain name performancesoft.org

(limited to 100 certificates)
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
performancesoft.org
support.performancesoft.org
support.performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org
performancesoft.org

Certificate

The complete raw certificate details for performancesoft.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3z1NfgHfCRBMlduZsl7
nio6TcYwCRTfrEM3N+//+b5RPpNnYnbcYit6pKUi1xEHZTk1ljO5Vm6MVGBh/Kjq
DR73aoCankpx1O/zA4JXV+mzgSBFQYLP6iuhugoVjBR4xKYehpVnxrxt+ZIwcy2L
GPBtRZ2zDFTfvcj5ptVUEoG381HdZL5ngNrhX8uZKnt3vm0+909+IpznHJiFSKfe
AaivPe1geWNfv+uyPitAhTpFFdUL9TK5WT320QDcg3Art+VYvQ+hAlY/g7jrdQ3a
WvzmCwMMyJdJHNkKmYQlZ4Spp8xoFBy/J5+Wgp4SPS9ynzScd7wxoHdu8TYBzxf7
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5236676836886401359324865532393415732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'performancesoft.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23163228823537843982647855891095033615997334207935834722144850745118619688339293285648549955675676996154766108048443939194180421445271320494196226746637598780443126023579517286275089588404694867493536179345378953037754655049189466728225264971321108882227264517097003336627035896836902527877803854200259413140191641354637324968856068997579415762578322215235527230691120156884969060187994601441189037907781746091382058043712818817291453851770557051967250494946343705944248094271075412277639010308900195492066411145645781020044592682662792690394413036621769266165574620000184835402743574259069449266640957273552369220591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bff3aee9113f1eb0ed99b1b947270ee47726f33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancesoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performancesoft.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0e0ff82811d1087970c1d49347343b2227a5ba82788282479bceb60c9aca16763dfbb74bad6143bcd74f845db25c07d0e7c55d1534d967b7ffac648130535b4dbe5637ccd63cbdd8cd492ac7a191b914548625ff7f100330c087640d1cfbffcb5e4d9fab2a9fccbc4d16b783d64375ccc08e448a7447456708868c92acaabd2e0660f1cbda9aca0bef8fb3b3bf32350fb22cf934d1efa1cb032f5753544a966ffc7a32dc762f1dc3e2bf77ac9f07acfc5927b11b57e94a5d6f90040ae0289066b16a46f5b587eebc8ffc6fba0aaabc5bff24840b12271d894f88b700ae977429f01c31abea2b5d53c5b66358e365a8d7df2e132eed5e504635a112f0a30d8a6