ajax.lindecdn.com

Issued by TrustAsia DV SSL CA - G5

About this certificate

This digital certificate with serial number 59:87:60:28:dc:e5:47:5d:78:04:f1:7b:67:be:29:7c was issued on by TrustAsia Technologies, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ajax.lindecdn.com

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Organization unit: Symantec Trust Network
Organization unit: Domain Validated SSL
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 59:87:60:28:dc:e5:47:5d:78:04:f1:7b:67:be:29:7c
Serial Number (int): 119004202049572048734828098544316852604
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6d:58:c7:7f:1a:e7:e1:3f:2e:a6:8c:97:35:42:bb:f4:d3:38:ac:3f

Fingerprint (sha1): d7:a7:d8:7f:35:54:81:8f:0d:67:8e:c0:37:e8:c8:bb:84:f6:fc:c2
Fingerprint (sha256): 8b:30:02:ed:32:73:3a:bd:7f:f0:cf:49:59:00:15:f4:30:65:0c:7c:16:45:b9:99:76:ff:19:cc:28:62:a7:3e

Issuing Certificate URL: http://trustasia2-aia.digitalcertvalidation.com/trustasiag5.crt

Revocation information

OCSP Server: http://trustasia2-ocsp.digitalcertvalidation.com

Check the revocation status for certificate ajax.lindecdn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ajax.lindecdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.lindecdn.com

Other certificates including the domain name lindecdn.com

(limited to 100 certificates)
api.lindecdn.com
serve.lindecdn.com
api1.lindecdn.com
sni200640.cloudflaressl.com
api.lindecdn.com
buyer.lindecdn.com
buyer.lindecdn.com
sni200640.cloudflaressl.com
www.keenn.app
goldentime-assetfriends.com
api1.lindecdn.com
api.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
www.yumlendar.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
quazarsoftech.com
art.lindecdn.com
ajax.lindecdn.com
sni200640.cloudflaressl.com
ajax.lindecdn.com
img.lindecdn.com
api1.lindecdn.com
serve.lindecdn.com
ajax.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
college.connormattless.com
cdn.lindecdn.com
serve.lindecdn.com
art.lindecdn.com
serve.lindecdn.com
contril.pl
ajax.lindecdn.com
expo.kianadev.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
api1.lindecdn.com
buyer.lindecdn.com
api.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
ajax.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
serve.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
ha.richardkubicek.com
ajax.lindecdn.com
img.lindecdn.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
ihr-wunschrezept.de
art.lindecdn.com
sni200640.cloudflaressl.com
morse-it.pacolabs.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
img.lindecdn.com
sni200640.cloudflaressl.com
api1.lindecdn.com
api1.lindecdn.com
buyer.lindecdn.com
cdn1.lindecdn.com
sni200640.cloudflaressl.com
serve.lindecdn.com
buyer.lindecdn.com
art.lindecdn.com
www.kevinbaumann.ca
www.skl.ro
sni200640.cloudflaressl.com
art.lindecdn.com
app.navcolo.space
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
dashboard.dev.way.gg
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
q.ahkam.ae
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com
sni200640.cloudflaressl.com

Certificate

The complete raw certificate details for ajax.lindecdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rd6YRnf/5D+egeCPHy1
XSGR1z82Lo5rtU2ina64gBFfuovHp0woMeCfIIt3DLaAuQ/epcLipI3vZluqP0Rm
EUkki3PobbDC4AIXOGJMB+077TIFWmCDHHnnvxw45vhd62y8Wv+T/eqR5zPOg9ZI
PNRgdeXgibfLAwjzBy7st9l0SaBYE5RJB3Cp2TcvWXsJJN21OiXmqnqg2Ld67BxC
rQy6JVnH0l5t7inDdJ/Z0B08voyfQgCXqwyNmCWZs8stokIw7zwpGhZEo7kd0yvc
eosa37o1nrekNQifJams26zMWLvhXff2UcI0sn7MoNA3F4oaFk93CpL3Fd/gxt5g
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119004202049572048734828098544316852604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia DV SSL CA - G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ajax.lindecdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28920149292292889213615005148690348660650478606357252568791943011820899603281326283921746207688635381692377596294214661070946397082592486564594718440344087173065934553927173214231450140753649787331084288769850923567179363736976487087432471143357475860225323054572369010430350115420681545489315901965142115141306179575442154961529423245575879401471944990946444954172743847231122587106669541971520718787040154459199347407677260424437733420317462827686726584080470505461858281607564826780077808383585457971497969005326689101812262621063476951244305961478500246569366970214070361740309250755717090273044519907296416784631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.lindecdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6d58c77f1ae7e13f2ea68c973542bbf4d338ac3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustasia2-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustasia2-aia.digitalcertvalidation.com/trustasiag5.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b20120dd3000004030047304502201a2a3f0040ebd28978af1d64e1361e51fb845dbe7c682678091d88c6b67cef8f0221009e841c5a1311311ea4da828c46c0adeddceb8c72c67c03abeae2ebe7b2c9e7b9007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b20120e070000040300473045022100a5ce7321163a8b8bd7c6a1be543256fc6ed646a7063b7efda97e89d231e0a82f02207abf0e07f49f60ce47a2ad38207baa9df4883b93e1688388f9d35b8684189a14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008f5b3286cb0456e55bbfcc5192bf9a54213f9a4f11868c0b54f97b06909039c4dfe1389cc3bb4de6a43d44e47e036f44cf5c4dac13a58f256afa63bd401c37fee4542f234811eb7f03de2247ea1c082c8ab3ab9c7dadfb62db1753bc4f9d35513af155a61bed40c08cc3e1f17b7bc6370c642bbf4ef1539377f2d762b65c536252a46680d8ec1a43ba89a2366fe257ff2ed93fa66ac302e60d10a9dc30f99c3f467b236a37c886cd4f4ac361affd9e8b66883179353e22a549d80f865e33d93797b89f587d75059a17419c327d1c8aa829f8f7824bab4b16a7443a56b37e7c32828e1fae383c14e1ea046fb5f2d9b4512b86fcbf1d2f9d9b8d57177445bd42a