ntg.ifreviews.org

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number 82:66:db:c8:ea:71:e6:c6:17:b1:7b:de:85:e0:bc:19 was issued on by cPanel, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ntg.ifreviews.org

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 82:66:db:c8:ea:71:e6:c6:17:b1:7b:de:85:e0:bc:19
Serial Number (int): 173333711497502509178560259339487067161
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fc:f7:0c:35:4e:6f:76:3e:bf:b5:24:ce:65:fc:9c:a5:df:e2:86:a3
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 80:b1:de:33:db:d1:6e:66:db:81:bd:79:1a:bf:50:47:f4:70:47:4a
Fingerprint (sha256): 64:a0:80:3f:72:5c:40:26:31:1b:00:64:63:6d:b4:52:e3:40:dd:07:3b:e5:ac:7b:e3:74:e1:24:44:13:c7:21

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate ntg.ifreviews.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ntg.ifreviews.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ntg.ifreviews.org
www.ntg.ifreviews.org

Other certificates including the domain name ifreviews.org

(limited to 100 certificates)
ifitalia.ifreviews.org
images.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
sni209491.cloudflaressl.com
beta.ifreviews.org
sni209491.cloudflaressl.com
ifitalia.ifreviews.org
ifarchive.ifreviews.org
sni209491.cloudflaressl.com
ifreviews.org
sni209491.cloudflaressl.com
js.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
caad.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
js.ifreviews.org
api.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
sni209491.cloudflaressl.com
ifarchive.ifreviews.org
js.ifreviews.org
ifarchive.ifreviews.org
sni209491.cloudflaressl.com
js.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
ntg.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
beta.ifreviews.org
sni209491.cloudflaressl.com
js.ifreviews.org
ntg.ifreviews.org
caad.ifreviews.org
sni209491.cloudflaressl.com
ifarchive.ifreviews.org
beta.ifreviews.org
sni209491.cloudflaressl.com
images.ifreviews.org
ifreviews.org
sni209491.cloudflaressl.com
ifreviews.org
sni209491.cloudflaressl.com
ifarchive.ifreviews.org
cpanel.joseborges.pt
images.ifreviews.org
js.ifreviews.org
api.ifreviews.org
caad.ifreviews.org
images.ifreviews.org
ntg.ifreviews.org
sni209491.cloudflaressl.com
sni209491.cloudflaressl.com
ifreviews.org
ifreviews.org
beta.ifreviews.org
sni.cloudflaressl.com
sni209491.cloudflaressl.com
caad.ifreviews.org
ifarchive.ifreviews.org
sni209491.cloudflaressl.com
ifarchive.ifreviews.org
ifarchive.ifreviews.org
sni209491.cloudflaressl.com
ifitalia.ifreviews.org
api.ifreviews.org
ifarchive.ifreviews.org
caad.ifreviews.org
sni209491.cloudflaressl.com
ifarchive.ifreviews.org
caad.ifreviews.org
caad.ifreviews.org
ifarchive.ifreviews.org
images.ifreviews.org
images.ifreviews.org
ifarchive.ifreviews.org
js.ifreviews.org
caad.ifreviews.org
sni209491.cloudflaressl.com
caad.ifreviews.org
ifitalia.ifreviews.org
js.ifreviews.org
ifitalia.ifreviews.org
js.ifreviews.org
sni209491.cloudflaressl.com
js.ifreviews.org
ifreviews.org
sandraborges.pt
sni209491.cloudflaressl.com
caad.ifreviews.org
caad.ifreviews.org
ifitalia.ifreviews.org
images.ifreviews.org
sni209491.cloudflaressl.com
api.ifreviews.org
js.ifreviews.org

Certificate

The complete raw certificate details for ntg.ifreviews.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguytTmeWz9IKEUG/0HE
ZBkfK1Gn/U3o7o/t0zMy3dao4EgMbrdPGo2dhWEY/jgvURKKKf4ediFxJFXgnGa3
rGHegr9akRFhQp/c7k4NMfCmWEIbwE8frETLL3hil9jbI0beojilcyZ2w0wK7Llw
tCbBmjtt4UDvD2D4SK56od9YwQFI/qnEa/fA5iA6CA63HzZj2/ZTyEKOKWusPmpe
9LKmM92xt4uXuR2OAdadFgefvLeH7QSJFAx2wvH++NTIhCceqODy4ehIiRlBvJSF
yaW2cauK7xmfT3e9fW4/8ObBYqY3rOfZvUirZ78yTIkh3q5qDb6eo0kmYA7eYqDP
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173333711497502509178560259339487067161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ntg.ifreviews.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23486093260834156580619846799803728077492765987680606292174621117791507151549333793872359460165066410869618016551608461019185608727946783346343782079748575821762587962172267059991196898910178898609837722763527873551373081312437992952557371378968836093367898144773978514523085930697657334853604697869002954256136830434914454759020373626036086526420766242926430947643020360988145116381429887086337293777314146900899514766442836167122494117240763597834501114022033190340026700547588666210553107691849398612960309453091847544270979853229095928112914900520475380732128486779033961194302524790673658825636305413272659611409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcf70c354e6f763ebfb524ce65fc9ca5dfe286a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntg.ifreviews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntg.ifreviews.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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