app.conwo.co
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:97:75:3a:80:bc:b6:f9:13:1f:a9:ca:c7:dd:36:15 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app.conwo.co
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:97:75:3a:80:bc:b6:f9:13:1f:a9:ca:c7:dd:36:15Serial Number (int): 15407922456272110023158047272869901845
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6b:5b:22:26:2c:35:9c:82:17:8a:66:49:65:a9:d0:06:82:7e:67:53
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): bf:e2:c6:9f:c6:8d:01:15:bb:41:85:d5:1a:91:8e:5f:77:6f:49:fe
Fingerprint (sha256): 79:f5:4d:61:5a:7e:11:05:30:13:22:86:e6:d7:53:e2:0e:48:d4:2f:56:04:8a:67:8e:06:0c:6a:fe:73:24:52
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate app.conwo.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.conwo.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.conwo.co
Other certificates including the domain name conwo.co
(limited to 100 certificates)
logistics.conwo.co
link.artwalks.app
conwo.co
going2.com.br
app.conwo.co
documentation.motapi.com
sports.amiti.online
dash.management
www.ykogames.com
tls.automattic.com
tv.socolive15.com
cube.januskopf.com
tls.automattic.com
roster.exeter77.org
app.conwo.co
refr.club
dakotacountychambers.com
tls.automattic.com
linkdev.beady.fun
tls.automattic.com
criarifa.com
map.fgt.one
ivanmardini.com
geektrainer.dev
amelhormaquininha.com.br
link.artwalks.app
conwo.co
going2.com.br
app.conwo.co
documentation.motapi.com
sports.amiti.online
dash.management
www.ykogames.com
tls.automattic.com
tv.socolive15.com
cube.januskopf.com
tls.automattic.com
roster.exeter77.org
app.conwo.co
refr.club
dakotacountychambers.com
tls.automattic.com
linkdev.beady.fun
tls.automattic.com
criarifa.com
map.fgt.one
ivanmardini.com
geektrainer.dev
amelhormaquininha.com.br
Certificate
The complete raw certificate details for app.conwo.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIQC5d1OoC8tvkTH6nKx902FTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMDAzMDQwMDAwMDBaFw0yMDA5MDQxMjAwMDBaMBcxFTATBgNVBAMTDGFwcC5j b253by5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOOj5OlTtnn+ 7kUOWE/rLwHaq3kR9y7jBQ27KAIWzV5g4Qz/t0bEvwK0JBoKuH6IF60p1DqFRa5m Y+Ghz0YrvYqQXA05TkPTa8i4FUY3O0Fcg/579aVm0hRtAU6UswAkBffVgJRms9qT NyP0t0LPMxHXfXHWY+yrFD2mJfRcNS6vOUjYMHFeFzMbp7giNl3Q7uxWA7WwegN+ gqCAtLQJ3mSLQnCgalG70xdoD2w1CEZneR5Hi87h3BjK6Ijk+umoFTyiO2suW847 eXd10doh8o/jZFTBiMUMuQP7mz1AFAHE/PZRwrMhr10Tu39ch0zM42w7aOX4D9vS GVb40xqvuRkCAwEAAaOCAqUwggKhMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKj QxY4nmzFMB0GA1UdDgQWBBRrWyImLDWcgheKZkllqdAGgn5nUzAXBgNVHREEEDAO ggxhcHAuY29ud28uY28wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3Ry dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8v c3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMu Z2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFwpONcOwAABAMARzBFAiEA6WEfrjsH4gtkHJ5Vckh99YqfMQwN bvWA3N0KFfpkx90CIAdvHAQZANKBmYkty/WfLP5RM1Nr8RolztNDU0hJampwAHcA 8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwpONcZAAABAMASDBG AiEAmyASeHz6r2TBhUqptCNU0DuoL9BGAAvWs70rd0+gNGECIQDSTL1jneIcXLqm QNdYa4z8X7CLACzZ+FblihFfrgjoLTANBgkqhkiG9w0BAQsFAAOCAQEAhwi8M36u Wk6xqM8yaDZORAFMF82Wx91dpt3h3d2ErHvH6zaY8CyEyQ78XcLyI37NUPOc9s/C iaCwH47SNNCz6kunwcvdCZqISuxl85DNDXn/MDVMOBZ5cfVKYcNBkhkP7B31RI4J N/UiCvWrwN9cD4+STWglqfeMaEXrt4BbfCLPbLibNkEn9t8bJCzqn/0yv62naPGv 2auGRbzvjxjtppw/fY7ZSysA9i631s/IW/56oMOotYTee0Z4ui2ZhNR80TQ03gl7 XRPbMkteKDTw9x0Z30oVpz9+j1+5/SFx0jQK16a4H7xyuc/5iVr7J3S3qIiGH2ii zOSTXpii/3e/8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Pk6VO2ef7uRQ5YT+sv AdqreRH3LuMFDbsoAhbNXmDhDP+3RsS/ArQkGgq4fogXrSnUOoVFrmZj4aHPRiu9 ipBcDTlOQ9NryLgVRjc7QVyD/nv1pWbSFG0BTpSzACQF99WAlGaz2pM3I/S3Qs8z Edd9cdZj7KsUPaYl9Fw1Lq85SNgwcV4XMxunuCI2XdDu7FYDtbB6A36CoIC0tAne ZItCcKBqUbvTF2gPbDUIRmd5HkeLzuHcGMroiOT66agVPKI7ay5bzjt5d3XR2iHy j+NkVMGIxQy5A/ubPUAUAcT89lHCsyGvXRO7f1yHTMzjbDto5fgP29IZVvjTGq+5 GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15407922456272110023158047272869901845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.conwo.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28736914462234721603751294326691853783897260818155589565242826397232578654997438440328564777633877845796563357665115179007223957010827920822015094408650823116803033768188595279806485628115765301762561791356648392379469250357223843950175375520926904707624222148641437059842786685600296896802204547114578896921916354919849517476562221007238881512902528508606674825151945893466248282743734008276340482149138404858900909659791760259670515802140724652720948900141029856718819858883448532416630944956366751214967470012132969488725595598066302061751368280647789382092541469643730888223603413270504788556273856956889887127833 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b5b22262c359c82178a664965a9d006827e6753 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.conwo.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a4e35c3b0000040300473045022100e9611fae3b07e20b641c9e5572487df58a9f310c0d6ef580dcdd0a15fa64c7dd0220076f1c041900d28199892dcbf59f2cfe5133536bf11a25ced3435348496a6a70007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a4e35c6400000403004830460221009b2012787cfaaf64c1854aa9b42354d03ba82fd046000bd6b3bd2b774fa03461022100d24cbd639de21c5cbaa640d7586b8cfc5fb08b002cd9f856e58a115fae08e82d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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