licensecontrol.sikur.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:47:21:8b:c6:29:3e:83:09:dc:0f:f8:b9:42:ea:f6 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=licensecontrol.sikur.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:21:8b:c6:29:3e:83:09:dc:0f:f8:b9:42:ea:f6
Serial Number (int): 4357017457870123475390397561893481206
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 98:aa:53:95:e2:68:bb:e9:1b:53:f0:1a:e5:d7:f4:24:76:f8:13:41
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 35:86:3a:10:3f:56:6e:d4:10:8e:13:36:e5:b0:dc:16:3a:b1:0a:e2
Fingerprint (sha256): 79:5a:11:58:f8:8d:97:fd:c2:02:aa:e8:d0:e8:49:ea:59:c5:e1:25:ea:72:14:0a:ce:76:4c:6f:83:38:6a:c1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate licensecontrol.sikur.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for licensecontrol.sikur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

licensecontrol.sikur.com

Other certificates including the domain name sikur.com

(limited to 100 certificates)
blog.sikur.com
sikur.com
www.sikur.com
sikur.com
sikur.com
intranet.wangerland.de
blog.sikur.com
one.sikur.com
partner.sikur.com
sikur.com
www.sikur.com
blog.sikur.com
blog.sikur.com
blog.sikur.com
sikur.com
vault.one
www.sikur.com
partner.sikur.com
sikur.com
partner.sikur.com
partner.sikur.com
vault.one
sikur.com
licensecontrol-api.sikur.com
blog.sikur.com
sikur.com
blog.sikur.com
connect.sae.edu.rs
www.sikur.com
www.sikur.com
partner.sikur.com
*.sikur.com
www.sikur.com
licensecontrol.sikur.com
sikur.com
www.sikur.com
homolog.vault.one
portal.sikur.com
phonebuilder.sikur.com
blog.sikur.com
sikur.com
blog.sikur.com
messenger.sikur.com
blog.sikur.com
partner.sikur.com
blog.sikur.com
sikur.com
www.sikur.com
www.sikur.com
sikur.com
www.sikur.com
sikur.com
www.sikur.com
community-test.quanta.com
connect.ditmer.nl
www.sikur.com
blog.sikur.com
*.sikur.com
sikur.com
licensecontrol-idsrv.sikur.com
blog.sikur.com
sikur.com
panel.ecommercity.pl
phonebuilder.sikur.com
www.sikur.com
www.sikur.com
www.sikur.com

Certificate

The complete raw certificate details for licensecontrol.sikur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPTk9qpCyeNk3XRPb3zI
tcaDy8M13Ae8G4Z/qE1CES9k5Rr8vUP+taOOBvdVb7RgECtGRK2PJmwv00blyMZe
e1UdnF3F4Le5oP1X3kVCo2qF4RKrmCuLsGwFsqMCCRvFksiFxl5LSNvn3EPpT7N/
pZ7mzqNOojRDJ29tVOtz89YgnMcpNL94obl6jhOj6SFzn9d86kubalsa0nKExu7G
KUuiIvguUgKiozmWd3DyUaC3HbeKBQS0DbrceG6Jqr3tEGmrU8OUs616u3d0Pe5M
Fq0uUQCclQRmCam2Qz26g9mD2/6v1nL59KhdtDok76+TP5YJkOaFG9n/I0v8EbCD
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4357017457870123475390397561893481206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'licensecontrol.sikur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22843656817871528761521421126677647878712760131082774846043045262843150446835681022061452820513151040967995459787109605862117024289728945591026142637288518917177882883547402862074852325303236014077115989093877272352796605156794819130336577219808521326634211493415493976974942717700049190194564928645501513247195510436785258751331375454012811753237607032222551223559346408463190441400391075203503890484699846412516792616828937060269073276855705225131576271552106227344160714931437965723121167130846830253108631483255372565472053607879362977256031670874099125644642691834869294828850341414597682948917321009410291565429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98aa5395e268bbe91b53f01ae5d7f42476f81341
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensecontrol.sikur.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3c1b0e230000040300463044022066cfeeafe04d940146b66d70ef9087aaea8ba2acc13c8bd691250e3717a50b3a02203cd34f2465e8140dacb667e5fed182a342ada0cee5a91cbb37692cb0473d620f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3c1b0de5000004030046304402201d085b2ded948b35439554b06e427e3be369c2b702270baf5fea429bebe4d7af0220274f43bf0acd80e0745866d98027216e3fdf22d6e3683e185ff206d6212f27d9007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c3c1b0de2000004030047304502201237f346b8d5b592f9a0fa32d07f9bd6271d70c896879036afaaa50b695b11d0022100912fd197b65b356f3644cab26d7c423870fc312a1e321da7560dd96d2d021197
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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