secure.timedock.com

- Timedock Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:c0:57:f0:e9:4a:91:82:b1:11:38:74:38:b3:bb:03 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Timedock Limited

Organization: Timedock Limited
Locality: Tauranga
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:c0:57:f0:e9:4a:91:82:b1:11:38:74:38:b3:bb:03
Serial Number (int): 2327932649218278849350238760636496643
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: da:4b:98:07:61:d7:6b:78:4d:38:11:e8:d0:93:2a:d3:9b:fb:c7:63
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 16:e3:df:5c:b9:de:a5:2f:b6:53:7b:a9:dc:43:e5:d2:7a:71:38:07
Fingerprint (sha256): 8a:f6:fb:80:73:17:88:b7:ff:76:35:3b:dc:08:58:ff:2a:83:01:28:a1:d4:c0:27:3b:00:84:f6:eb:9d:ef:b3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secure.timedock.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.timedock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.timedock.com
www.secure.timedock.com

Other certificates including the domain name timedock.com

(limited to 100 certificates)
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
www.timedock.com
secure.timedock.com
ssl256013.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
ssl256012.cloudflaressl.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl256013.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
timedock.com
ssl256012.cloudflaressl.com
secure.timedock.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256012.cloudflaressl.com
www.timedock.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256011.cloudflaressl.com
www.timedock.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl256013.cloudflaressl.com
www.forums.timedock.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
secure.timedock.com
6di.linkengageclick.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
klenty.timedock.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
sa542gl.wpc.edgecastcdn.net
6di.linkengageclick.com
snib48egl.wpc.sigmacdn.net
ssl256013.cloudflaressl.com
6di.linkengageclick.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com

Certificate

The complete raw certificate details for secure.timedock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCSNoQg61XrjqNLV9Pxp
Fuy062/V8/wsuW06/hGucew5Ekz2ESQ2tWFPcLjUeO2M3sTD20QPAXMGCxVc4RLC
3jpe3oTEac7M9Ei6fW1Gc4O/dXiA4tCec4o27px2lXbWGwKJ/UTk/99MgiluL6X0
8AiHpi4jrzT22I+55iU4a65UKBIgVK6kJj7ClGlkUYhMuh2Td2nTdTaRMUdJfBvc
U0pWP/bMbYnJOpFw6Evr7X0cf4hPzgjEzQsn+qnjyHWtF+/YxzrW1UCeutKYdHNQ
rRVA+WvDuCrhH0Ycmn38f/h2W527LaYbz5b6Douz//sQE9Rn3KSe2DQqKSJ1esB0
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2327932649218278849350238760636496643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tauranga'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Timedock Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.timedock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25265686066873208701161589952021716297687671810334022760729936205149136981984362669070056501191289410479019437986696010563130675567721064229918739374087375903275423909559341046940547586233969532260902386960440192764332322202901474749802409570521126647744980940572098039794055053015001790383541185887216843397791007203549877127481934695742843146614291800136945492111911694782693612433585615381204011558517072523276832635086021461974567538096833662901992980082567549604737145709757303347871987896778691134262221017688631688758458799596581137717190550918525760012631700959977015801753796669799444390130616611329548514461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da4b980761d76b784d3811e8d0932ad39bfbc763
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.timedock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.timedock.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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