*.gatewaytotheunreached.org
Issued by Encryption Everywhere DV TLS CA - G2
About this certificate
This digital certificate with serial number 0f:5d:ee:e0:42:fd:81:b7:38:d1:76:0a:d0:fe:e9:8a was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.gatewaytotheunreached.org
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:5d:ee:e0:42:fd:81:b7:38:d1:76:0a:d0:fe:e9:8aSerial Number (int): 20426148525944030801478877177674918282
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 61:4a:58:f9:fb:9e:f8:56:3e:7a:41:28:68:8a:f7:6c:f1:dc:15:e3
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6
Fingerprint (sha1): da:9e:ab:ad:2e:81:ff:69:4d:8c:ae:c5:51:b0:a5:78:f8:4b:a1:e4
Fingerprint (sha256): 75:c1:2b:1d:2c:60:f9:58:21:79:4e:2a:96:42:71:ff:e2:5d:9e:8a:0c:63:83:bc:1f:88:38:fe:8e:97:dd:22
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate *.gatewaytotheunreached.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gatewaytotheunreached.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gatewaytotheunreached.org
gatewaytotheunreached.org
gatewaytotheunreached.org
Other certificates including the domain name gatewaytotheunreached.org
(limited to 100 certificates)
5272653.ca
*.gatewaytotheunreached.org
marsexpress.ca
marsexpress.ca
5272653.ca
5272653.ca
gatewaytotheunreached.org
flightscanner.ca
marsexpress.ca
*.gatewaytotheunreached.org
5272653.ca
marsexpress.ca
dailystormer.world
5272653.ca
wales.healthcare
shepper.ae
marsexpress.ca
marsexpress.ca
marsexpress.ca
dailystormer.world
marsexpress.ca
latinos.tube
thruthe.bible
marsexpress.ca
34755625397.ca
marsexpress.ca
*.gatewaytotheunreached.org
marsexpress.ca
marsexpress.ca
5272653.ca
5272653.ca
gatewaytotheunreached.org
flightscanner.ca
marsexpress.ca
*.gatewaytotheunreached.org
5272653.ca
marsexpress.ca
dailystormer.world
5272653.ca
wales.healthcare
shepper.ae
marsexpress.ca
marsexpress.ca
marsexpress.ca
dailystormer.world
marsexpress.ca
latinos.tube
thruthe.bible
marsexpress.ca
34755625397.ca
marsexpress.ca
Certificate
The complete raw certificate details for *.gatewaytotheunreached.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIQD13u4EL9gbc40XYK0P7pijANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzIwHhcNMjMxMjE1MDAwMDAwWhcNMjQxMjI5MjM1OTU5WjAm MSQwIgYDVQQDDBsqLmdhdGV3YXl0b3RoZXVucmVhY2hlZC5vcmcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxsi+V+FVOyogpjc7wP7HUtvrUqLJI1Te Hc9Hw3DInyjtFIBqrsWFJufIRbS7K7YSB6w+KWkK7Zbtsl1gavGvn2+KwnMWqtc1 qerjv8RZQ0jjzasmBuWfkciYq3TyVALpbgbp3oc4a4pZKNG6kpMj7IEkPOPkTJ9e ea0wVrj/jSnSfkX8koUePhd/0v6X+4nvaRAoj5hHhzdhmpGbk0UBfYxyYFhdzNvy 5yyFT8gkIJlZxkymI2kHZag5TQa0B30bby7YHMJSwhVeLc2OcDFnUjO2dC4v6B/V 1zGyLC71Si9BPssPa/KGcnNYvt2QbxdNE7y+lbYiFQZlpJ4+yXJfAgMBAAGjggMI MIIDBDAfBgNVHSMEGDAWgBR435GQX+7erPbFdevVTFVT7yRKtjAdBgNVHQ4EFgQU YUpY+fue+FY+ekEoaIr3bPHcFeMwQQYDVR0RBDowOIIbKi5nYXRld2F5dG90aGV1 bnJlYWNoZWQub3JnghlnYXRld2F5dG90aGV1bnJlYWNoZWQub3JnMD4GA1UdIAQ3 MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMIGABggrBgEFBQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBKBggrBgEFBQcwAoY+aHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0VuY3J5cHRpb25FdmVyeXdoZXJlRFZUTFNDQS1HMi5jcnQwDAYDVR0T AQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAdv+IPwq2+5VRwmHM 9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGMa94ZtgAABAMARzBFAiBfX7F6yKYbMVBk V0wDzcwQbwVlf6qRnF64RMn3/LnzuwIhANz6+o6pgI10nGjzr2vYV3gt4q3HJPCy b3HQ/iasWQVNAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM a94ZjgAABAMARzBFAiB19/pvvTl1ps5FhnXfAu52VfDiYIQ4XyO9yJExrD8q5gIh AIOkGpeXeFwL1YUKh68UWy3eJijem8HDqaCTfMtT67PwAHUA2ra/az+1tiKfm8K7 XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMa94ZagAABAMARjBEAiBT8ZSULPnRWZoI jQIPFo30j04vFhH6EGotU8YxVbyCCgIgEQD7nAsMe/dWFgkOuY7ZFZNPCpNakAdN ojvdcgf0Yv0wDQYJKoZIhvcNAQELBQADggEBAKcyFjKZ2pwhqB+5N82lfHDlyJui aqZhpZatm95obbU0oYcebKlFlhQNqgjjuCvuBitmCeG2kVnerTH2xgCRBgbk4mAa HCyUxC6lYFfZbaSggf0cy6n5syPN1PlhXWOUCLNwFRv8FSFc9uiCaoyNUmBnOpg+ ybqf5ooqHJurdba3GqmclaQovelA6sHQ1b52I1LBh1IXiBCkmjKCexNXtDkflBTG 1ff2M6dAeWCsZagS9lBic+meL135n1Ce27rdOaFPIl5QmTk1slW3EEprzdhL6qvq uPZjdJKf9J5w2PXAbdhXUyeZG73raBP6S0wutzQMyX5UWriT30N17OyNDog= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMbIvlfhVTsqIKY3O8D+ x1Lb61KiySNU3h3PR8NwyJ8o7RSAaq7FhSbnyEW0uyu2EgesPilpCu2W7bJdYGrx r59visJzFqrXNanq47/EWUNI482rJgbln5HImKt08lQC6W4G6d6HOGuKWSjRupKT I+yBJDzj5EyfXnmtMFa4/40p0n5F/JKFHj4Xf9L+l/uJ72kQKI+YR4c3YZqRm5NF AX2McmBYXczb8ucshU/IJCCZWcZMpiNpB2WoOU0GtAd9G28u2BzCUsIVXi3NjnAx Z1IztnQuL+gf1dcxsiwu9UovQT7LD2vyhnJzWL7dkG8XTRO8vpW2IhUGZaSePsly XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20426148525944030801478877177674918282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gatewaytotheunreached.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21811012574109645437490096405095201358074468756612912103669648457765378306863851065191324401755770255830905908938614239092093563246966205136816645547580636341923845239786252672298155469409650032185520542709902592968927368081597801540555198184988563243336551187849860902832863485021692339541378109154370001942855956258110538562697644165940950978176385298344152101105325215064174175355016896810676734881102243659481957807959668014521947326136196802353342491235461832782409110068210205908811933632244798083068080432498474307813532322954816267035023057663345526287687318198609789947499281111386347670598332840783200744031 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 614a58f9fb9ef8563e7a4128688af76cf1dc15e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatewaytotheunreached.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewaytotheunreached.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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