www.mojeek.com

- Mojeek Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:7a:35:52:4e:72:d7:c8:c5:b6:8a:b8:99:87:f8:89 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mojeek Limited

Organization: Mojeek Limited
Locality: Croydon
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:7a:35:52:4e:72:d7:c8:c5:b6:8a:b8:99:87:f8:89
Serial Number (int): 20572961642211974094336320130060384393
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:56:2f:0d:ee:96:2c:8e:fa:90:0f:a6:fc:77:41:f2:da:1d:bb:53
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 22:24:a7:58:81:36:c7:47:60:a9:3f:05:a3:5e:ba:b5:39:d8:df:5b
Fingerprint (sha256): 6e:0c:d4:76:1b:e2:ea:73:36:f3:7e:9e:b1:7f:94:59:43:f0:16:85:76:65:14:52:0c:10:f1:53:bb:50:e6:e3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.mojeek.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mojeek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mojeek.com
www.mojeek.co.uk
www.mojeek.de
www.mojeek.fr
mojeek.com
mojeek.co.uk
blog.mojeek.com
accounts.mojeek.com

Other certificates including the domain name mojeek.com

(limited to 100 certificates)
systemstatus.rrc.ca
www.mojeek.com
status.hpiinc.com
status.digitary.net
systemstatus.rrc.ca
status.stability.ai
status.cofh.org
statusp.dotdigital.com
stg.dotdigitalstatus.com
statuspage.vantage.online
status.fmgsuite.com
site-status.motor.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.esafetysystems.com
www.mojeek.com
www.mojeek.com
status.ssactivewear.com
status.reliancenetwork.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.crewbuilder.ca
caloes-status.ravemobilesafety.com
status.c9cg.com
status.esafetysystems.com
systemstatus.rrc.ca
www.mojeek.com
status.ssactivewear.com
systemstatus.rrc.ca
status.stability.ai
status.crewbuilder.ca
status.reliancenetwork.com
stg.dotdigitalstatus.com
systemstatus.rrc.ca
status.internal.clear.co
status.sabbagradiologos.com
status.clear.co
systemstatus.rrc.ca
status.platform.creditxpert.com
status.myfundingchoices.com
systemstatus.rrc.ca
statusp.dotdigital.com
status-ca-gtassurancetool.gtil.gt.com
status.daydev.lol
status.mojeek.com
status.explaineverything.com
systemstatus.rrc.ca
status.powerdmarc.com
status.cofh.org
status.daydev.lol
site-status.motor.com
status.fmgsuite.com
status.snapcraft.io
status.powerdmarc.com
systemstatus.rrc.ca
status.myfundingchoices.com
systemstatus.rrc.ca
status.mojeek.com
status.statusiq.com
status.stability.ai
status.clear.co
status.digitary.net
www.mojeek.com
systemstatus.rrc.ca
systemstatus.rrc.ca
status.hpiinc.com
systemstatus.rrc.ca
systemstatus.rrc.ca
statusp.dotdigital.com
status.esafetysystems.com
systemstatus.rrc.ca
status.snapcraft.io
stg.dotdigitalstatus.com
systemstatus.rrc.ca
status-ca-gtassurancetool.gtil.gt.com
status.internal.clear.co
systemstatus.rrc.ca
status.cofh.org
status.landell.org
systemstatus.rrc.ca
systemstatus.rrc.ca
stg.dotdigitalstatus.com
status.c9cg.com
status.landell.org
systemstatus.rrc.ca
status.internal.clear.co
www.mojeek.com
caloes-status.ravemobilesafety.com
status.mojeek.com
status.jucy.cloud
status.sabbagradiologos.com
systemstatus.rrc.ca
status.stability.ai
www.mojeek.com
caloes-status.ravemobilesafety.com
systemstatus.rrc.ca
systemstatus.rrc.ca
systemstatus.rrc.ca
systemstatus.rrc.ca
status.clear.co

Certificate

The complete raw certificate details for www.mojeek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCjdAUzn4q5NG4GNhbe
c/o5XpD6+8NOkHHRnEcGLocHEf5KPCXhiUZcon2HO5bxNSlGJnFj5uf5SzSohfI7
Ns79weobWlr9oFhk7tLxZCxF1Im7y62LC3umPGtkIWipGTGm9T3ySeBKZNTasnWQ
4oBW42irSBmKnsZX30BPJ7KQoF6GQJrA4EzpJEDvKLcwDd5eWUy5h0wfB6U9d3hC
AriqcTJDqdI3xb+vcU0yUcJeMQvlTyYddbGrzD29xNqxVT8hW0dpoI1/VllzK7Sp
Fdj+TvPhhOno8HbNc4XDn3sSbQDZLu/66p7u8oU+W2gmCy+2QjRhrC4FFOEkqwZA
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20572961642211974094336320130060384393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Croydon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mojeek Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mojeek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23914583747707514447412638727665054112687461182453263692103633027896311226225752496367453946519835596938727036570507375012109556111890149966330313895359387606280457301610054397346923220315937321149321039928092352242191994545348433359406351331612697369250964423321068519679337320704146081014555983478059224658345623628580269620878167751882674407432894822187199490815697274146650517431189696055617335550385519753298133601285246687334479919773705253135921665731806635661090447457017980659399404486448948770305405953718337085631264866847554001916980124919552537697150240488869346786413788367369073204496476075804020064391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d562f0dee962c8efa900fa6fc7741f2da1dbb53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojeek.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.mojeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.mojeek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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