*.econsulting.pk

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 09:2b:7b:8e:02:b8:46:89:52:ab:2b:e2:5b:4d:a5:17 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.econsulting.pk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:2b:7b:8e:02:b8:46:89:52:ab:2b:e2:5b:4d:a5:17
Serial Number (int): 12188826714603312094425582742119752983
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:25:60:d6:ae:3d:c5:ce:42:9a:fc:e4:03:df:ae:82:42:b4:e9:9c
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 88:cb:c9:d2:15:80:81:c9:ab:39:2f:52:77:f7:a5:5c:16:db:97:45
Fingerprint (sha256): 8e:a1:38:34:af:07:8d:cd:ed:e3:33:78:86:1e:bf:e2:71:cf:59:05:21:5f:0a:a5:c9:f3:f9:66:74:36:e0:bb

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate *.econsulting.pk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.econsulting.pk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.econsulting.pk
econsulting.pk

Other certificates including the domain name econsulting.pk

(limited to 100 certificates)
connect.etic.co.ao
app.proshopsportscards.com
connect.etic.co.ao
forms.mlogica.com
www.econsulting.pk
forms.mianrosolar.com
partners.oneway.ng
partners.oneway.ng
connect.encorecorporatetravel.com
www.econsulting.pk
connect.etic.co.ao
forms.neurobounce.com
forms.luxhotspot.com
forms.dealbeds.com
mail.we-rent.mx
forms.mlogica.com
forms.migrationlaw.com
earlyaccess.embr.org
partners.oneway.ng
connect.etic.co.ao
connect.etic.co.ao
partners.oneway.ng
forms.mlogica.com
correo.unidos-podemos.com
mail.wellspeakva.com
*.econsulting.pk
partners.oneway.ng
forms.docninja.io
forms.mlogica.com
www.econsulting.pk
forms.mlogica.com
forms.bravenewworld.wine
connect.vendeur-afrique.com
partners.oneway.ng
connect.etic.co.ao
forms.rentalmanager.com
forms.rentalmanager.com
connect.encorecorporatetravel.com
forms.mlogica.com

Certificate

The complete raw certificate details for *.econsulting.pk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIQCSt7jgK4RolSqyviW02lFzANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzIwHhcNMjMwODMxMDAwMDAwWhcNMjQwOTEyMjM1OTU5WjAb
MRkwFwYDVQQDDBAqLmVjb25zdWx0aW5nLnBrMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArrrtgA1+etTd5xg3cU1Rt/ctdjdbRdhj7nI+tyb2WX9tI7NM
3MFljbuvW5tGE0OF+czrDOekqgVYA8F6HQsIJSGZrwhtKqb7+Ic5rrrF8AS6s0Z0
4QpZau6RFwXeYG0HSpULSwq31UtJOANi2Z/qEYyfHfKBlww9Bi7FMRsZlsDCDEAK
t7Z5hFsi8tOloKB3UL0JRny6fZIllqvRvhvBCr3GNVnu2Q4HcC1MC8MfkiI6GVPF
6lGIJBykW6+xXa4EVueUDuD9or7wLQE+61wRVPxIPpIAgxt8t+5eou5N0MLOjU6O
tqOjKimeCevOrRiKcnQdnr0I75o7woNjwn1C0QIDAQABo4IC8DCCAuwwHwYDVR0j
BBgwFoAUeN+RkF/u3qz2xXXr1UxVU+8kSrYwHQYDVR0OBBYEFM0lYNauPcXOQpr8
5APfroJCtOmcMCsGA1UdEQQkMCKCECouZWNvbnN1bHRpbmcucGuCDmVjb25zdWx0
aW5nLnBrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMIGABggrBgEFBQcBAQR0MHIwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBKBggrBgEFBQcwAoY+aHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0VuY3J5cHRpb25FdmVyeXdoZXJlRFZUTFND
QS1HMi5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKSshQWQAABAMASDBG
AiEA/1Su9PW7JnCGQ+wIe7aJvxdD3EnVSR/EuBtuBHH2c7gCIQCNXDXHYkVeZA/J
9Qn7uvjtCQD+7RHvPrSBQfJKINa+ogB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABikrITrwAAAQDAEYwRAIgZOBdrWFMxZk/uURJfyprrxDGIidO
6Cum4o4+wcQjf8wCIA02OnygbPNsF1WM3IsVJ1QA9cyy09UQ+8pNPJpzCw/8AHYA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGKSshPEQAABAMARzBF
AiAQ4BsGzeHx5NjT9zVyeE5PC5dbAFF3CH4UVHiOZUqTHQIhAIa2KdgsIxPHIK5B
j+/PoTmi23j4q9cI/bhGP9yV+l/CMA0GCSqGSIb3DQEBCwUAA4IBAQCID+w70qRs
csTrfkPOD7QiRt+K6IoY+ZDnB3iXUpVpDG5n8S5K2XjG/q2RfLr4hR8p1aWqvlOd
zuFaUBetGSrK7S6WYkz6wgPnFlGWS4HGKao84HTfvA8BTP7EVcJVf7EHaTky5S0M
hLTyvxlIkEULMVcrldimQYBOCX6ZePjodznYOTuYirDta/ct/ZUI+X6MjVSex5xc
bzKkeUJqeDc8VJpcBjpMswUTfREtqyM+mjEwk8ky2wuwTFn7JBjpO4uFPcH9aTMc
tJ5TB4/y8eGZmT1pelYNNgndV27jYAZoobXHXC2RvOHA2HMgE6JLegPVK48U1ezE
TJro8DQQjFr3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrrtgA1+etTd5xg3cU1R
t/ctdjdbRdhj7nI+tyb2WX9tI7NM3MFljbuvW5tGE0OF+czrDOekqgVYA8F6HQsI
JSGZrwhtKqb7+Ic5rrrF8AS6s0Z04QpZau6RFwXeYG0HSpULSwq31UtJOANi2Z/q
EYyfHfKBlww9Bi7FMRsZlsDCDEAKt7Z5hFsi8tOloKB3UL0JRny6fZIllqvRvhvB
Cr3GNVnu2Q4HcC1MC8MfkiI6GVPF6lGIJBykW6+xXa4EVueUDuD9or7wLQE+61wR
VPxIPpIAgxt8t+5eou5N0MLOjU6OtqOjKimeCevOrRiKcnQdnr0I75o7woNjwn1C
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12188826714603312094425582742119752983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.econsulting.pk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22057642565813654273871424878200284846094662412033087231441925152627752213207345203522066440185476614411336233641726410443777244038244965400466324020505862840776383097966755064236275971213035234232205048499529281830683094980245515253490319182813328735414704770490605156398610437889756456148161645106148668369126708991804870245875258822070067885960102794459640929829899852871018429927509355732539429460405702634778564786411662617041299510975071341458006004968478658100619170517047510782161136350841035198394245023588417171911296965667644362609470848295762840347463834012757095278029286187374578092175017999963688616657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd2560d6ae3dc5ce429afce403dfae8242b4e99c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.econsulting.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econsulting.pk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00880fec3bd2a46c72c4eb7e43ce0fb42246df8ae88a18f990e70778975295690c6e67f12e4ad978c6fead917cbaf8851f29d5a5aabe539dcee15a5017ad192acaed2e96624cfac203e71651964b81c629aa3ce074dfbc0f014cfec455c2557fb107693932e52d0c84b4f2bf194890450b31572b95d8a641804e097e9978f8e87739d8393b988ab0ed6bf72dfd9508f97e8c8d549ec79c5c6f32a479426a78373c549a5c063a4cb305137d112dab233e9a313093c932db0bb04c59fb2418e93b8b853dc1fd69331cb49e53078ff2f1e199993d697a560d3609dd576ee3600668a1b5c75c2d91bce1c0d8732013a24b7a03d52b8f14d5ecc44c9ae8f034108c5af7