nandiszabo.com

Issued by UbiquiTLS™ DV RSA Server CA

About this certificate

This digital certificate with serial number 60:0d:fe:61:cb:c0:42:ea:8f:7b:e3:a0:83:91:89:6d was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nandiszabo.com

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 60:0d:fe:61:cb:c0:42:ea:8f:7b:e3:a0:83:91:89:6d
Serial Number (int): 127678546934741854720028951460176824685
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ce:73:4e:63:c5:b3:cb:e2:65:33:c9:d2:26:95:f1:49:85:06:a4:4f
AuthorityKeyId: 38:12:c6:79:02:66:38:02:e3:37:24:e5:8b:0f:ff:45:95:69:e6:31

Fingerprint (sha1): e4:fb:0d:5d:9c:8c:c3:95:aa:45:86:f7:69:7a:5d:44:34:01:b2:59
Fingerprint (sha256): 6c:41:d2:96:22:12:af:a4:5f:64:3e:0d:7b:a4:cf:43:e2:ff:14:f9:3a:6a:34:33:b0:fa:76:63:1f:e4:f3:ab

Issuing Certificate URL: http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com

Check the revocation status for certificate nandiszabo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nandiszabo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nandiszabo.com
www.nandiszabo.com

Other certificates including the domain name nandiszabo.com

(limited to 100 certificates)
nandiszabo.com
www.sierracancersupportgroup.nandiszabo.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
mail.theartoflivinganddying.com
nandiszabo.com
www.theartoflivinganddying.com
cpcontacts.sierracancersupportgroup.com
sierracancersupportgroup.com
cpcontacts.sierracancersupportgroup.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
sierracancersupportgroup.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
www.sierracreativecounseling.com
nandiszabo.com
sierracreativecounseling.com
nandiszabo.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com

Certificate

The complete raw certificate details for nandiszabo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJq7lMFA9bpgUVEihD0E
f9zgdHMaDxj0k4eSCpL98FVRbDkZU0cEx2hz8my0f6K5JH0HteSm08I4hi/I3PVg
V7rVBvcdi9F45v8zgsxbqb+V3TrYFvvVbCcjlB4JTHeDbrkzt6ZN/UiLRlZF9R7d
IvZ9ERUskqPRDNzK7HOCKYVF+xZuQf+AA77eu4xipBTRDD3KFQ1qVNJQMt3Y8gpa
RG8rAR3YqC6kgmofDatlTNB4aE0AJVyesodJ3eST8dfIkNUsMPYe/Bz5WdQiKgDZ
rUJB4L/C9pi9T4gHVsa8BIsNCSNvpHyWQu6OWuC5NWepVpGC59G/UX0M77+/kADo
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127678546934741854720028951460176824685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UbiquiTLS™ DV RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nandiszabo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23809102890805672868291863796222622702532067913003428056933827747791350967212382159232594963451985695060300407798509929397855772438007360275496633766504325918429838312309982299342996683502851797588476058911063223167111577170876991490832016454549248577266425790394232362393313231568968361020055150314370525273650336825461666900116631360982051376993999908880052281124926931065830091620861349826751492172873998179613745222872006775086343948653581810514586143433525829277563080005150576863255396001801152372530474636763516572791642968436041509203039214665109418036416004845138291854308600054190056634239669320780078966947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3812c67902663802e33724e58b0fff459569e631
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce734e63c5b3cbe26533c9d22695f1498506a44f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.net/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandiszabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nandiszabo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161168d9231000004030047304502201f1cf38bd9e25a4074a22b9579ab5a415d010fe9b1b5ef9f9fe79e0604d30b70022100c0f57282a98e76a8cb3ac0758da5968c3cf5a0b10f65b6efcad58d4a3761c07d0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000161168d91d6000004030046304402206697ecc38bfc43c7bdf2b8f52ecf522fbae74988069f348e77d339331bbeb97502204d116a7ead9eb808bfcabd7af3e3a2f689c7c18b3b921c256ee6b93f3dc289ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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