*.metaco.com

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 67:06:c0:67:33:5b:3c:b6:d2:3a:fd:62:8c:95:9e:2e:c5:10:5b:2f was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.metaco.com

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 67:06:c0:67:33:5b:3c:b6:d2:3a:fd:62:8c:95:9e:2e:c5:10:5b:2f
Serial Number (int): 588176614542293703787203264104393627230979250991
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d6:e4:1c:9c:54:31:8e:6f:b7:52:e0:b4:5a:7d:5b:4d:59:02:84:e4
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 20:1b:73:e0:4f:f0:7a:7f:00:6d:6d:20:4d:b6:36:b6:ac:55:42:09
Fingerprint (sha256): 65:81:75:d3:4b:3d:ef:a4:ba:d8:18:30:7e:a8:b0:d6:d8:9e:a7:55:9d:2d:27:56:40:b4:4e:52:4a:e6:3d:0b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate *.metaco.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.metaco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.metaco.com
metaco.com

Other certificates including the domain name metaco.com

(limited to 100 certificates)
support.metaco.com
desk-test.oniwa.co.jp
support.prefr.com
support.prefr.com
silo.metaco.com
metaco.com
support.vidigami.com
support.vidigami.com
metaco.com
metaco.com
support.filenorthcarolina.com
silo.metaco.com
support.itp.mx
support.metaco.com
support.metaco.com
www.metaco.com
support.supergrp.com
metaco.com
support.prefr.com
servicedesk.cyberschooltech.net
mijnhtjz.htjz.nl
mijnhtjz.htjz.nl
desk-test.oniwa.co.jp
support.metaco.com
help.logicfusion.com
service.prodigitude.com
metaco.com
www.metaco.com
support.metaco.com
support.lewisit.org
support.metaco.com
servicedesk.cyberschooltech.net
service.prodigitude.com
silo.metaco.com
metaco.com
help.logicfusion.com
www.metaco.com
metaco.com
soutienit.novosst.com
*.metaco.com
desk-test.oniwa.co.jp
metaco.com
*.metaco.com
silo.metaco.com
support.metaco.com
service.prodigitude.com
www.metaco.com
metaco.com
metaco.com
help.logicfusion.com
www.metaco.com
support.itp.mx
metaco.com
support.beepec.com
chhqmtco.metaco.com
support.metaco.com
support.lewisit.org
support.prefr.com
metaco.com
chhqmtco.metaco.com
*.metaco.com
metaco.com
silo.metaco.com
support.supergrp.com
helpdesk.sensabilityio.com
support.metaco.com
support.metaco.com
mijnhtjz.htjz.nl
metaco.com
soutienit.novosst.com
helpdesk.sensabilityio.com
support.itp.mx
www.metaco.com
soutienit.novosst.com
support.metaco.com
mijnhtjz.htjz.nl
support.beepec.com
soutienit.novosst.com
silo.metaco.com
support.metaco.com
support.metaco.com
support.supergrp.com
support.supergrp.com
help.adics.net
support.metaco.com
support.metaco.com
desk.elephantintheroom.website
support.metaco.com
www.metaco.com
metaco.com
help.adics.net
support.vidigami.com
www.metaco.com
metaco.com
metaco.com
metaco.com
support.beepec.com
metaco.com
silo.metaco.com
silo.metaco.com

Certificate

The complete raw certificate details for *.metaco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 588176614542293703787203264104393627230979250991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 13:36:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 13:36:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.metaco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889697992898772157497928666648517290806703178563420416165906271045103480405400823161075632426325164567723853460903737585911361087440240931446426143509683972009673424928590346088400798389593718341635984687115169276246736254692429540479088925521347821257201427187661685761374411999863331862172508045298156017992112511014614226005369918519009760782006764826759012250981889423914247336253980272589053403891787215490945408186051019924249154511911694891113873512040156601655772162775724103899251108022758136624902344278869020671902210257076603540133810423655173670784478253303194312622367023056132364121871428096697401488723608768035468400454444261056369948879109604228125955817582034810800518226659437009099045144755302240561779134430886129277871935658544733069704790484042082251101413439696650460506273428574131233656675728534960319784497187891288604249385887269266692725865910940658191191306481423982124755465855064761252966081876380889126086085954089992539445583204490562938154781518052240275533345882501221607656542811472662655934841553390010661798705347724061130849142119236483127929932038393067892171090907598103945055810922882154357432357845842846695574467037728450145529171583601347731806638745872569509690333716355169900544679613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6e41c9c54318e6fb752e0b45a7d5b4d590284e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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