tasks.dalaric.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:9b:a9:84:0f:35:b8:b7:31:47:2e:e1:c1:a0:e3:56 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tasks.dalaric.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:9b:a9:84:0f:35:b8:b7:31:47:2e:e1:c1:a0:e3:56
Serial Number (int): 10112840173614998918440709045314708310
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 94:09:91:34:bb:10:a4:e7:9e:5c:ed:b0:97:a9:01:a7:51:8b:9d:b7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): aa:fe:5c:31:1f:a0:42:5d:28:2b:0e:b5:54:aa:af:f5:b2:0c:e8:d4
Fingerprint (sha256): 6c:77:43:53:a0:37:9a:d2:07:24:73:d9:ac:9c:7e:15:bb:87:81:34:51:c4:cf:53:ce:f9:76:8b:c5:6e:59:27

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate tasks.dalaric.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tasks.dalaric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tasks.dalaric.com

Other certificates including the domain name dalaric.com

(limited to 100 certificates)
smartermonitor.smartercommerce.net
dalaric.com
itsupport.gardinerbros.co.uk
service.degunfactor.com
support.infosea.fr
service.degunfactor.com
service.degunfactor.com
www.dalaric.com
dalaric.com
helpdesk.contentserv.com
service.degunfactor.com
dalaric.com
service.degunfactor.com
support.dsavltd.co.uk
books.cs.zohohost.eu
support.bitinflow.com
support.setupservices.tech
service.degunfactor.com
books.cs.zohohost.eu
dalaric.com
books.cs.zohohost.eu
status.servermeister.com
status.servermeister.com
secure.dalaric.com
service.degunfactor.com
service.degunfactor.com
service.myadaptability.co.uk
www.dalaric.com
portal.dalaric.com
akademie.chatbot4you.de
support.vangils.pro
service.degunfactor.com
service.degunfactor.com
assistenza.tuttoufficiocortese.it
service.degunfactor.com
dalaric.com
dalaric.com
books.cs.zohohost.eu
dalaric.com
support.ignitehospitality.com
service.degunfactor.com
service.degunfactor.com
support.medis.app
status.servermeister.com
dalaric.com
books.cs.zohohost.eu
help.monadplug.com
books.cs.zohohost.eu
support.micromaintenance.co.uk
dalaric.com
ghd.arda.solutions
helpdesk.yeo-tech.co.uk
support.smartitgrowth.com
support.softsystem-gmbh.com
service.degunfactor.com
support.softtec.de
service.degunfactor.com
support.wili.lu
instandhaltung.helpdesk.brillundadloff.de
support.shockvoyce.com
dalaric.com
service.degunfactor.com
dalaric.com
tasks.dalaric.com
books.cs.zohohost.eu
secure.dalaric.com
service.degunfactor.com
books.cs.zohohost.eu
status.servermeister.com
dalaric.com
service.degunfactor.com
support.cre8ive.group
service.degunfactor.com
dalaric.com
status.servermeister.com
service.degunfactor.com
service.companyhouse.de
desk.my-apaleo-topsys.fr
dalaric.com
layouts.monect.org
support.eu.anritsu.com
desk.pcrework.nl
support.wiin-organizers.com
helpdesk.conbrio-group.de
bim.csu.edu.tr
service.degunfactor.com
support.fdit.co.uk
status.servermeister.com
valmetsupport.raventech.pl
support.pmiq.co.uk
service.degunfactor.com
help.broomx.com
dalaric.com
dalaric.com
support.redrocketdigitalservices.com
service.degunfactor.com
service.degunfactor.com
service.degunfactor.com
support.cgreen.me.uk
service.companyhouse.de

Certificate

The complete raw certificate details for tasks.dalaric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ+xt2hOeCAZ3sXle1EI
5wDTTMxxTSMNzeLadfxn9ycko5CGrQbzCSaWGUTi1uQHXgtDMIxwGJxGz+ns7NZG
R577SQjo/Ws6uJa/ORKDj0ue0xApHRKfWiv/NaOUxE42YMIT0lxpbA6uj7aC6FQ8
wYMemyMJQpoh0m/kiABeeFkVXgTEJQDk6Mz+RUI6SXVp5tuBeToNzihslUwP6q7N
mPrHRtcwIOEaO46zbTiXNZQuJCAEmknT2wYiRgGjLi3Q1RuliqGVzLoB0vPFmOxE
dM/x9mqCeDXUWtS+IE1sSpzBFV3ev68LFGVtV4hhImEtdM9Wri4c5aWv1ubXcMV0
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10112840173614998918440709045314708310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tasks.dalaric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24876685179153266414543252839356630841887470909025880673231375705174194549130044406510543203568622169384698909122960191610106067016686527733674523870128900246005297008435879134565626216540760916620780454562861386927931544329846022994092785345895123589248123500037746353012408630475154120344520000828848986538831923988185725185887035028701779137308385761673549323301206402427851587481973757039081477165640069594257487033978016336631922439741512489482068495581783878300090976460437052358422944184850395461725016667245690145038633598001339341527640235710602433722226048303293226535788758026501859700407381725662991971401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94099134bb10a4e79e5cedb097a901a7518b9db7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasks.dalaric.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008d0d5a6bdff5cf0a81dde741f6cc0387fe7c6dc32e57fb071ffa0fbbd4c6ef80beaacc91a1de4264bffc64858e46b9171e760891d27a0768a1c3021deac26d85be5ace645bf907f13e9e8370010fe644f9a16955a166e03d08a6d4da5edfef2d2f1ebb29624e8e59cb6c97ad46f83b3e836385ea13e996b2f44fd9d7f1b0c122d10ced86f951d5bb5a8caadfb5a1193cb077895d12305c67a2d869277223aad21f8c8275a10fbf8c3d88beead94c17592329bc5656d1b4d94ac45c026475c95d8179426561ae5811aaaaaab61938921ddd5f19c1be7ed2a6bcd42d8967aac7bb6897f008f00edb7249675cc3b138ba6ff931daa634f82e88cec5ad9a18ac90a7cf5e3157a0fee734addd453f41f72c37a9155b3f7716c5195f9dea30fc6ec4e9b1884fb2154efe65c5f79edd6333e5e65753013b8c7a567366f4da7a1a2069bd4a22a4398c645076cbb09fed9171a5c7c31d7c9536b5939d4ce54538a4b2896ed34ad44a2deaf58d020c995c2adcff61b75fe58dc0092fe8e52a005e088e4a3f3e9916de60faa337ed3bb7f542fb541707c6790014fefa4c7bbbcb4cac7196e953fefe57a2391ddc0f53c34a1b55e1254292a90735676fd93963bbaddec5c5d692709ee7a5b538b4a0ecb85fef92f495a5ffd5a9b61f591622beafc743b7ba8857261da5ef637f5d42e9c0ed74a7c217fd0803fc1957e41887ee2606771e80cf