www.prpaper.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:ae:8c:78:52:5e:ba:e9:3e:97:a5:52:2a:4f:6d:e6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.prpaper.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ae:8c:78:52:5e:ba:e9:3e:97:a5:52:2a:4f:6d:e6
Serial Number (int): 7552448702525944812624714533480394214
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 41:47:1f:05:2a:e8:d0:a3:97:a1:f9:21:88:15:4c:8c:5d:7b:94:ef
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 51:e3:d3:cd:ec:e0:e4:22:f5:66:c1:a5:3a:95:5d:dd:4c:df:54:b1
Fingerprint (sha256): 86:fd:87:9f:d1:2e:9f:93:40:db:e8:b2:48:40:a8:97:4c:9b:e5:c4:ee:3a:3b:0a:ec:77:23:24:aa:5f:56:88

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.prpaper.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.prpaper.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.prpaper.com
prpaper.com

Other certificates including the domain name prpaper.com

(limited to 100 certificates)
eu1-status.mulesoft.com
eu1-status.mulesoft.com
prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
helpdesk.prpaper.com
eu1-status.mulesoft.com
helpdesk.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
securemail.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
helpdesk.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
www.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.prpaper.com
catalog.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
www.prpaper.com
eu1-status.mulesoft.com
www.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
www.prpaper.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com

Certificate

The complete raw certificate details for www.prpaper.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68e2dGPEkiCWr0e+MdT0
NoNSEH6TitJ8EoTPbBOi23IK4sa9YKm+PIYygYT4sRPOxrsydsM4+c1VTmuiKIcM
XleCj/lI3czzkL8JYUS8cu1vNR+sRy8SVfvyQlRGsLklL0BytqR6aDa0rp47iE3l
fMzK5ZmNHQ6Qu4I112qcyq6zIWbQ2DQkbiJ5Rv9I+4+0uPGnuoacmkzIaqkgYF3f
0nNyuBPte5sowB/FQMkP0+isFukp8gOU0s90Ix0BWxKoEn6Wif9IgF6WTABTI/ww
+4Hy9VRcTenCs9s0BZBQVloJhWB2k6o2+UOWIcGrkIaKS1IkfTJV9r/Pci4DHm9b
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7552448702525944812624714533480394214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.prpaper.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29764483676508698248631150235876679970236799824479973905387097719897920000735756071234056594716256996231084861179688542079024142500238174274570806176024810695806219771217769303805432626293483407447844884854586021642416100704868513073184619019117931423144075283126186150888265999204510508351044440798168175030344618567821460167232134339169758433628708101037615646735204526153813817244325304832941324616993987967527518347972968327524720468120852553796072326417533085868481267474211566985918731166017796028216465663667747782955741973885616024226375915482635773309625263815933871514835676445283782080826731358318031231951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41471f052ae8d0a397a1f92188154c8c5d7b94ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpaper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0d5a3e881ef55990d5f2a3a4fda017170054a6a7efb2255cf648c48ab8aa2b15b09e8b9cd50938f9b90722614254bf78edf6d874fbaf264ac203d656ec7cb7ce6a20fe909801a565ec9da588a6b2c21565b988f3afa9d0c322de93dde3d8718eb4ebeeadf0c18c00abeabcc3d164b02b09167161766c5b4421169d3454bf9836fd9df00e1f5a1942cc1501bb89d5fd89ca89f2b22ad946b38995aad00f9223dd946465448cdf1a917f5cb20c02e8d1bb9e53a6547c09b2edae3dee609297ad1b9c76ea42ea6f372c44e4c36ff71e090ce13af9a0b0eed9705d95ae1c7d82fc92b4b95cde882c0ec15baf015e0b73b41e659d1d79d1776d3333d2d5770d23a01