secure.cvnt.net

- Covenant Eyes, Inc. -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 55:73 was issued on by GeoTrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Covenant Eyes, Inc.

Company registration number: 43086C
Organization: Covenant Eyes, Inc.
Organization unit: Tech
State / Province: Michigan
Locality: Owosso
Country: US

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:73
Serial Number (int): 21875
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): 1b:ba:b0:50:be:3d:22:84:57:18:27:cc:43:72:44:35:dc:86:77:0f
Fingerprint (sha256): 7a:dd:cb:bb:09:2a:a0:e2:ec:7e:7d:d3:88:3c:10:7c:f6:de:15:d5:53:3a:7d:46:6e:1b:43:11:b4:c6:f8:85

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate secure.cvnt.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.cvnt.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.cvnt.net

Other certificates including the domain name cvnt.net

(limited to 100 certificates)
secure.cvnt.net
soporte.cjgconsultores.com
ssl.ces.cvnt.net
ssl.ces.cvnt.net
cewiki.cvnt.net
secure.cvnt.net
it.oodc.com.ph
coveyes.com
pdlapi.cvnt.net
staging.bulwark.cvnt.net
secure.cvnt.net
support.cosmicktechnologies.com
it.oodc.com.ph
helpdesk.al-mozon.com
staging.nodeapi.cvnt.net
helpdesk.ie-launch.com
cewiki.cvnt.net
confluence.cvnt.net
support.thebestclaims.com
it.oodc.com.ph
bulwark.cvnt.net
preview.docs.cvnt.net
it.oodc.com.ph
feedapi.cvnt.net
secure.cvnt.net
coveyes.com
staging.arbiter.cvnt.net
coveyes.com
api.cvnt.net
eyesonapi.cvnt.net
coveyes.com
alpha.deter.cvnt.net
testrail.cvnt.net
eyesonapi.cvnt.net
zoho.cvnt.net
it.oodc.com.ph
secure.cvnt.net
jira.cvnt.net
nodeapi.cvnt.net
support.biz301.com
staging.billing.cvnt.net
test.jira.cvnt.net
staging.webadmin.cvnt.net
soporte.cjgconsultores.com
sandbox-bulwark.cvnt.net
confluence.cvnt.net
soporte.cjgconsultores.com
secure.cvnt.net
asistencia.soporteparati.com
confluence.cvnt.net
secure.cvnt.net
api.cvnt.net
preview.feedapi.cvnt.net
coveyes.com
coveyes.com
push.cvnt.net
support.cosmicktechnologies.com
zoho.cvnt.net
it.oodc.com.ph
coveyes.com
secure.cvnt.net
ssl.ces.cvnt.net
helpdesk.al-mozon.com
webadmin.cvnt.net
staging.bulwark.cvnt.net
bulwark.cvnt.net
staging.docs.cvnt.net
sandbox-bulwark.cvnt.net
it.oodc.com.ph
coveyes.com
sandbox-icee.cvnt.net
api.cvnt.net
api.cvnt.net
support.thebestclaims.com
icee.cvnt.net
coveyes.com
api.cvnt.net
it.oodc.com.ph
secure.cvnt.net
api.cvnt.net
coveyes.com
staging.nodeapi.cvnt.net
helpdesk.ie-launch.com
icee.cvnt.net
eyesonapi.cvnt.net
it.oodc.com.ph
it.oodc.com.ph
staging.icee.cvnt.net
staging.webadmin.cvnt.net
coveyes.com
asistencia.soporteparati.com
coveyes.com
ssl.ces.cvnt.net
it.oodc.com.ph
api.cvnt.net
secure.cvnt.net
support.cosmicktechnologies.com
webadmin.cvnt.net
ssl.ces.cvnt.net
api.cvnt.net

Certificate

The complete raw certificate details for secure.cvnt.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucy6Y3H3MPUrbaMDzObP
1pnPnD7A5+hA6AWu/cJHaM4XU49wFEPNiTsEmZyV74XJ7GlsjYprdVwto4zlKP8Z
TZGJ56xgMxW2VrcS4kH55w1lN2VBtqkN5s5J7AKy665Y5RTxFqMewPtvdfk2DEIQ
h9qaUpf8grDgn0sdzRIz9wzxxmROAXi4wh6Q4NSEXsqNY/l9udgomV2mwspBygb0
tlymDsh6ZIC/8tzPKHUjUGg3RKn5j1lPcRInzk+477zO8jHCBEib/Wd5Ysbgos1u
9W0da3aMQTraZuyGnxlmhYtx0iat6iB5mk+H8EMWiVZ5apYG71nXTd+d+Z8/aSLZ
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-27 17:15:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-01 10:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '43086C'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Owosso'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covenant Eyes, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tech'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.cvnt.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23455041597576987217152893608134763636280873601662328691042038208036847352675728697211544292409228990535707512043466730637605468323268232427158497276814521420750925958064079258019910936081987358486925678974826117618495497402151017981204805379793276721657260067055644749839346154017027797370662207560446147960814423509421567324345010152575851670111457090699878753395735097525488360474371108882632422761581162439421064062091174743280572324826375427552796034668971932982542473770160401655393764252413402916727465287337249991100184292072713561922336374257344313936904128342193553900084950745469311143779850353178220616167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cvnt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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