rigt.com
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number c5:21:66:5e:3a:46:43:5b:c6:a5:23:7a:a8:10:9f:d9 was issued on by ZeroSSL.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rigt.com
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate will expire on
Certificate Details
Serial Number (hex): c5:21:66:5e:3a:46:43:5b:c6:a5:23:7a:a8:10:9f:d9Serial Number (int): 262031337237221998553555460669299531737
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: dd:a7:b9:cf:b0:50:e7:57:27:68:99:50:cd:ae:38:5c:2b:6c:e1:c4
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): aa:41:23:e8:71:20:ae:53:93:29:3d:c6:ad:81:6d:20:32:2a:30:74
Fingerprint (sha256): 81:15:02:39:ce:74:d0:44:5f:73:89:82:ca:5e:95:bb:b0:19:7a:40:dc:f3:7c:f6:9a:cc:5a:2a:0d:3f:60:2f
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate rigt.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rigt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rigt.com
www.rigt.com
www.rigt.com
Other certificates including the domain name rigt.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for rigt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5TCCBM2gAwIBAgIRAMUhZl46RkNbxqUjeqgQn9kwDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMzEwMTAwMDAwMDBaFw0y NDEwMDkyMzU5NTlaMBMxETAPBgNVBAMTCHJpZ3QuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAihQ95o/GR0zP0bqOyrbQhNNPxzE28odveDYPze7e Gce2u18lRFPw0Bmrcnt/6xPJQ21mfbnYBS1mKdXZihEuuJtQC1YDkP8DRq0FsmR9 L1Wy+/GzRvTmM34i02U76CQq4D/4XCdZvkIMLusYQI+Y8fNmX3BeDvk4NRDOEUcs FKY/N1dC3Z6riJ0feAHqm9HHuHtF10VyyKNIdZC/vGd9/AtmpfVCCe0Eie+CzVjT 9uTKceJAl/R5HQsxendTdFO4L/7zmCA7V1+dD2ZJhkHQ2JYK9juL/zyNhosV0HQ1 28TswSqALMAbjZ6o8wf8r5ZxiH8ksFEsQP6Sfh6LoJJd7wIDAQABo4IC+jCCAvYw HwYDVR0jBBgwFoAUyNl4aKLZGWjVPXLeXwo+3LWGhqYwHQYDVR0OBBYEFN2nuc+w UOdXJ2iZUM2uOFwrbOHEMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQB sjEBAgJOMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgG BmeBDAECATCBiAYIKwYBBQUHAQEEfDB6MEsGCCsGAQUFBzAChj9odHRwOi8vemVy b3NzbC5jcnQuc2VjdGlnby5jb20vWmVyb1NTTFJTQURvbWFpblNlY3VyZVNpdGVD QS5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly96ZXJvc3NsLm9jc3Auc2VjdGlnby5j b20wIQYDVR0RBBowGIIIcmlndC5jb22CDHd3dy5yaWd0LmNvbTCCAXwGCisGAQQB 1nkCBAIEggFsBIIBaAFmAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa OnQAAAGLGS/pzAAABAMARjBEAiAAwDLL1ZX1Z+L6uDXUA0JW9Wd3ywaiyZY6jReT wrM1yAIgBF4w7SJPnm7qRdU1yCE4Lb0w7skg6gIbBjl69wyycRgAdgDatr9rP7W2 Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYsZL+ooAAAEAwBHMEUCIBulETYY IxCmUAvu1ix9j+KF0BHL6ayqN3BvXuqukG5tAiEAgC/5Z9AQ1ARowmOcHhLzucRj xKy+y7kW6O8r4v5hg8IAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAYsZL+n7AAAEAwBGMEQCIDv2FJ9gS+WZnUO2Q9tn3B+pT9PbWwRiLQ2zuKkn SSb1AiBGFApsQcbo1czHtjaEGAB15jxJg8DwI274YDOxwdw4cDANBgkqhkiG9w0B AQwFAAOCAgEAUbIdx/LJVsMdfYl8uM4Z8BVi1+NsZxMODkbmNj/rvUhTDMKByzTJ GR8D7KHsZEZ+lTn7jFD52qSVkMS/qLGZYDHfKvRE2/H9zwPZqT7SW6lI3B6FMICq M8ST32WRbdQW/u6fD+vEdUwSgEPQvhSQIuiSWF8TJeU9xFDkNKriKm2CTdDMlQZS 7P32WkZ4oT2Vzg82qw7eNr9S4Cc+Tg1dcGxJ4LlguNmh8/n5KIJoCSIEHA+3M1Oc eiwvMVwC/h+kaT89RMtqfu4B2d9sf+C885OZ8rq8tjQWzdDFAW1JeTwaY45Ee5MR OsxSyakSLN3yQXPyCtlx/nH4WWKFSpjAATkgjkG3ORDRt7gaT2fpMSH/7pvxaiVr 5Rg4zYe2zvXe+OO923Vye8wSoysNbz1ibAFBpqb7BQ6VK2ThQEpkK5cda3etlNKH uGs4N/MW+xlDmUfuwqrunXIy7QbUXsBkOiiTs/1995lZnrePOTL4IvAqjaxfzBm7 HyGmb8jGSgoZespAakodNfvhrBsmoQewHVUyinrKO/nmHiNaRFEa1+LQxU94zCyP XCjEKPwFJOcLR+Mrelj4jpKbFQfat5CiFdYDqx/cz8AWhJNDlGAfiQaifO2O3Ghm 4mZ1aRz4CxkqPk42EZ2FsvfPxVaEJ2NOlxw/KqCOSVz2Lizsrj2GQNk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQ95o/GR0zP0bqOyrbQ hNNPxzE28odveDYPze7eGce2u18lRFPw0Bmrcnt/6xPJQ21mfbnYBS1mKdXZihEu uJtQC1YDkP8DRq0FsmR9L1Wy+/GzRvTmM34i02U76CQq4D/4XCdZvkIMLusYQI+Y 8fNmX3BeDvk4NRDOEUcsFKY/N1dC3Z6riJ0feAHqm9HHuHtF10VyyKNIdZC/vGd9 /AtmpfVCCe0Eie+CzVjT9uTKceJAl/R5HQsxendTdFO4L/7zmCA7V1+dD2ZJhkHQ 2JYK9juL/zyNhosV0HQ128TswSqALMAbjZ6o8wf8r5ZxiH8ksFEsQP6Sfh6LoJJd 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262031337237221998553555460669299531737 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rigt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17430867688590641826257848959037983798437029372511541345217394674522974456195100475647751766099597888719593146009437838533404566971021787569768327740426246378486028945220691937091312645591909321849987224315253976580543478989787195068891765513412875047384200571829533152646210568314691628671483005700256376257450473348597391816170441338678164231916799753052239215591025742980781545702558414932401197328069559359519696546966156379759722976364548026624840210078781875186392797615941027911536046510153311573949325139451856108061241496166773782656999150210668373866579734476022614604055842290662800035040306807331508870639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dda7b9cfb050e75727689950cdae385c2b6ce1c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rigt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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