www.directumtranslations.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:85:2a:aa:aa:00:7b:41:33:1d:a9:85:a7:bc:c2:dc was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.directumtranslations.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:85:2a:aa:aa:00:7b:41:33:1d:a9:85:a7:bc:c2:dc
Serial Number (int): 7337580843713725957636493902677328604
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3d:45:71:a2:54:1f:ff:15:78:ad:67:76:22:1d:23:7f:ef:4e:27:88
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 85:26:88:f3:9a:90:cd:ab:9b:b0:c3:d3:72:d2:a9:a4:79:eb:30:d0
Fingerprint (sha256): 7c:2b:3d:b9:73:b9:43:a3:f9:21:ae:5c:d1:b8:66:b8:4e:cc:51:73:d8:e5:f4:7b:08:f6:fc:65:93:4b:75:8f

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.directumtranslations.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.directumtranslations.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.directumtranslations.com
directumtranslations.com

Other certificates including the domain name directumtranslations.com

(limited to 100 certificates)
indiquebodylaser.com.br
mail.softwarewagon.com
dev.directed.studio
www.bluedom.tech
directumtranslations.com
cuanto.com
cloud.geteducation.link
staging.directumtranslations.com
cloud.geteducation.link
www.directumtranslations.com
mail.softwarewagon.com
www.vennsmith.com
directumtranslations.com
www.directumtranslations.com
www.directumtranslations.com
www.gettrove.app
directumtranslations.com
www.directumtranslations.com
mcleod.stage.parade.ai
www.shandellejensen.com
directumtranslations.com
agent.shippyexpress.com
directumtranslations.com
www.harryxie.dev
app.directumtranslations.com
directumtranslations.com
www.directumtranslations.com
www.gettrove.app

Certificate

The complete raw certificate details for www.directumtranslations.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7337580843713725957636493902677328604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.directumtranslations.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873232131059528343244961569973170603702372123843937382094064443173247796078322187643312046222090104466281850058678689184177914959110283217106904105791915799494709547057031379044279676754377484440792836649805979631969516108643038447738105893463707338200737608405710482940047433352196414558579703841597821093930557352755266358603907281775555426723721287325534403582588570765093889306375563612013572014987846088174095560953564606461783019399886007586207307526215732042757586648639168946205859825630076676674976391305432586371827570755350613687237503107035501793665521203464244069863293044292984889455592573967058790518151460525329062597756367159871155305409478725304443004352506813766307921665412912918647218693058551833237925169878737539132646347879119258872474453914102027587692299646493491978340086382658290863934605459488709920098712436487254783108921015158255189803723324971433085387964346461862545817232573628106618011139795306177031548500370674072754157268679978384618762688707973532248752819006178288776267762459883829575616036254587496088932379230919984539808667880771751165484461305892377770962900263283014241776719812208604294265794079137636761538690005197067516211508113233493464386452436053798106241466640261461521345263177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d4571a2541fff1578ad6776221d237fef4e2788
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directumtranslations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directumtranslations.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0069dd8e9e3c3817933e9326863d7b315be8a3c4e94665ab8837608ad6c66e08b728569df83a21b534814ce205a4b4a0a83a7eb4211c3e4cdf39ba75eed28346bfcec6e657809de7b944d7d0f30aa08848d010c4bab55afdd65dd1dd9008f0a8611f2b95b92af24988572322e8ad01b15d3b6a22e596111a4bacef4cd209908b2214081a6c152f24060a342b4228d083ce632408a74d1f1e6f83ef608e85b3530c6c704d2a898b650a1d33d00152aaed403ae13fd8ec00025b184bce3a8fc6e1e99ab68872f44ebeca0fc2a1fadf86e1485d8ce98a4604aa133eae98346b08c0fd2d39ccc929d1065e9a3abf0cf6d3f7584b72c0441209b89d117a6696221ec29483ebcc86fd83ce849143e397c49b151457ec546d69a96208515df9a0778236ddfed4ec5790c58cf189f6f8f43d9ae1f6af6b4a1fa2bbeca6aebc20a6e3e8f22fd1c98aca8b48e7420e9a787d22269131a3ea4256a37e73ea6599f7dc2004cd23fbff6a3bf5ca4a01707d273d0d2ee8e96ed9021ce68b70c898ad306b93d9432b18a3048459aaff257587ddec6b3a4d3801488a13b7f3d4e53f55430c3693df26019577baa790ae8760afaca690a65e6bcbbd2dd8aa11e40e634d96896cd6ce13613de5378e8c464dca490ae926fc0a81648028d1a6996e027154aaef1b3dfc051a0ba8053885e4d222c0a74e21a2d840a15f7dcfbfa0ed641c6cbdd97515aeb1