fireguard.automarshal.ro
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 5e:da:b9:97:e1:69:ec:00:b6:fe:81:c0:1f:e8:5a:8c was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fireguard.automarshal.ro
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 5e:da:b9:97:e1:69:ec:00:b6:fe:81:c0:1f:e8:5a:8cSerial Number (int): 126083116597934078601459171916593519244
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): 7f:9e:38:31:e0:91:d0:b7:c0:d9:f1:47:4e:fd:a9:00:60:6f:67:7d
Fingerprint (sha256): 74:26:65:51:71:42:a8:c1:a8:4f:a6:3f:34:2a:ae:c6:cc:58:db:a4:d6:5f:22:8d:6b:43:8c:41:16:f5:4b:53
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate fireguard.automarshal.ro
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fireguard.automarshal.ro
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fireguard.automarshal.ro
www.fireguard.automarshal.ro
www.fireguard.automarshal.ro
Other certificates including the domain name automarshal.ro
(limited to 100 certificates)
Certificate
The complete raw certificate details for fireguard.automarshal.ro in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFsjCCA5qgAwIBAgIQXtq5l+Fp7AC2/oHAH+hajDANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTIzMTAyNDIyMDEyOVoXDTI0MDEyMjIyMDEyOVowIzEhMB8G A1UEAwwYZmlyZWd1YXJkLmF1dG9tYXJzaGFsLnJvMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAwYWv1Qw1T1OomcmWCAsh+RPaU3r/Lydbcvz55R8CzJHR s1CfAPzWDkVZ17F4o1EOsadDrZxd+9g6e3AEQKJ5JuGWaWdqskmOBzEEJ0b5nHms asntSo4lUjbbD9vrsPF43ksO8d1oe+gH9XEt/ig7V9IGeOuceqgDQYenFaxrQx7A MplJXPwlatsDBoovqgtfcPBSmjS+3NNAQcQUHAuLGxbPKnSKcKwxOF53ZLcMWaSm mNUlo3yPAxRCPgb9YJG1spnz6MycLG5M9c2RDzV6lc353+XiCC7XskW1h3+QR3v2 imZaMCY8LvErSRUFDKkAtIx9YpQvKC0252xpsS/4CwIDAQABo4IBmjCCAZYwDAYD VR0TAQH/BAIwADAfBgNVHSMEGDAWgBQmFH7g3Nem9+LUBCffYfHC7OcyyjByBggr BgEFBQcBAQRmMGQwQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0LnNzbC5jb20vU1NM Y29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6 Ly9vY3Nwcy5zc2wuY29tMEEGA1UdEQQ6MDiCGGZpcmVndWFyZC5hdXRvbWFyc2hh bC5yb4Icd3d3LmZpcmVndWFyZC5hdXRvbWFyc2hhbC5ybzAjBgNVHSAEHDAaMAgG BmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsG AQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9jcmxzLnNzbC5jb20vU1NM Y29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5jcmwwDgYDVR0PAQH/BAQDAgWgMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQA1hEgSNClpTcOA P3mfr46LRZKF53TRz6NTEkRBhE0jcHDj0X1WeZvSKNWPY3YnI4OOae1YJnNdNeBJ KgcEp1y7CLwq8akIV919P/Emd4gXgTIHM7D5qWbpDuuc7qp1nvTYIYfN8PoP4Sdk nsnSZkg0sLIS5XqrgTxYPrXPTrk3v0JgcMZjDDi05+ja5tuFmXFyXhfNpIFQPTBY n13lWoCGPP61UUFmK38qicW9ipVXtSEPXDZDS0k6w5allBIfLSOQfuMaH9iM87aU 1O9hakkUw2BdeuEFDtjbiMHfH64xzvMbMGCDi38jlVrwhVH3zvJHMh0g8Whl0iMs 5EoyKmnm660KqCFm8gmjsigRyl1SK3RGSDkAQEnJp9uQMEII/s38NRwet0VEqVEK eESh1OEXMq4wUf9ZtUkBC6voSyCdzWVQCLhtLSMbPseQJeVTJT+KqsUqxdBLvV48 MCkJp/bkY0ZCYBKHYaltU/TVJRpERvnRJ84pTN86Ivlt9EoD8Y19pk/Dj5O86vp6 57le4upBMzKeF7ozrp/oMUCY9c8f3uWIpOuVkmm4wVfoyJl2pmJ29KhR1/dIn83B 5CSQdXJiJ1rZyTt1+zCtXl5jBy7Bxz0dcId7XdPXJcQWKBWP+Cja4x7+Jw2rUFxQ uqO3iivKNyOrLdZZJGsXiR/3GJ5OGA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWv1Qw1T1OomcmWCAsh +RPaU3r/Lydbcvz55R8CzJHRs1CfAPzWDkVZ17F4o1EOsadDrZxd+9g6e3AEQKJ5 JuGWaWdqskmOBzEEJ0b5nHmsasntSo4lUjbbD9vrsPF43ksO8d1oe+gH9XEt/ig7 V9IGeOuceqgDQYenFaxrQx7AMplJXPwlatsDBoovqgtfcPBSmjS+3NNAQcQUHAuL GxbPKnSKcKwxOF53ZLcMWaSmmNUlo3yPAxRCPgb9YJG1spnz6MycLG5M9c2RDzV6 lc353+XiCC7XskW1h3+QR3v2imZaMCY8LvErSRUFDKkAtIx9YpQvKC0252xpsS/4 CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 126083116597934078601459171916593519244 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 22:01:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 22:01:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fireguard.automarshal.ro' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24429916298521704100927900128850279410008266793521294629050982642561870452357490078167736982848757052530239720797331995981079124670872551187522765035210136936914897470165762547571096486803484906081513258744261219259779690589418216945316096371987037035845035257993357976520378799138768688311089282389460986963054092066798222643355817757482139008621617835203766506052774099464819927430652406763675251650932448552617623316994505949960664238379419234892351910852287855406934159584821028003420105608444120091238268393867525153991322835521122050172434666090538204199888225695166774399330939839576530050640864217353463789579 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireguard.automarshal.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fireguard.automarshal.ro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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