*.duckma.me

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 09:15:82:e1:9f:bc:84:7d:2b:8b:40:6d:94:47:37:44 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.duckma.me,OU=Domain Control Validated+OU=PositiveSSL Wildcard

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 09:15:82:e1:9f:bc:84:7d:2b:8b:40:6d:94:47:37:44
Serial Number (int): 12074744785114534940002312279216830276
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:9a:84:c2:df:46:89:c3:04:19:93:4a:d1:be:56:31:4f:cf:d2:c3
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 47:4c:7b:0d:88:57:06:37:00:6e:07:07:ba:73:00:8d:86:0e:05:de
Fingerprint (sha256): 92:77:15:e7:da:e6:8c:37:6f:c9:2b:b9:73:8b:b7:fa:d2:94:6f:4a:e4:14:2e:bd:33:9e:aa:70:89:b5:2a:1c

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate *.duckma.me

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.duckma.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.duckma.me
duckma.me

Other certificates including the domain name duckma.me

(limited to 100 certificates)
pme-sandbox.luizalabs.com
appleiphone.page
www.funaccuracy.com
app.getvidon.com
gcpdemo.gridcell.io
avaritia.hr
vishalsikka.com
imcasey.com
mysaga.com.au
www.fiasp-udine.it
www.horseriding.app
www.cirrcl.com
webmarketer-admin.webmarketer-staging.me
loodesign.eu
demo.happybuilding.app
staging-3diq.3diq.com
sni.cloudflaressl.com
staging.paperless.ironsight.ca
admin.redriver911.com
sni.cloudflaressl.com
www.chessface.com
*.duckma.me
rapidhotelsystem.com
sni.cloudflaressl.com
dev-api.populi.ai
www.nilshein.com
votorantim.hml.sigaonline.com.br
duckma.me
*.duckma.me
chancecalculators.com
social.mytr.in
lfnandoc.net
insane-mag.com
tanja-johannes.app
www.bitecrunch.co.uk
info.hayabusa.io
www.atominvention.com
crisodevelop.tech
karantradingcompany.com
www.oudon.xyz
is.aleasa.dev
share.ideotracker.ru
www.kjb.co.uk
sassom.hml.guiasaudemais.com
www.servify.xyz
mysecretary-payments.duckma.me
houkai3rd.epictools.net
www.carpaccioetterem.hu
panl.co
devlinks.gintaa.com
eventstogo.app
app.chroniclebot.com
web-dev.prendamas.com.bo
votations.24heures.ch
pakinternational.com.pk
www.thewirednomad.com
apseng.com.au
www.servify.xyz
admin.ehspook.com
www.opinionperu.com.pe
sni.cloudflaressl.com
www.monumente-moldova.com
www.auxileolabs.com
dev-api.populi.ai
rimaimobiliaria.com.br
www.thangasamy.xyz
duckma.me
*.duckma.me
apollustech.com
jomann.org.ng
www.buy-like.com
artists.dybuss.com
submissions.icsg.world
is.aleasa.dev
www.edim.app
csaenlimited.com
www.cloudgineers.com
demo.messehero.de
www.besmitten.com.my
www.wroclawstudio.com
www.nordisch.ch
re.slipapp.io
scen.studion.co
stanfoot.co.jp
votations.24heures.ch
www.app.powtorkazpolskiego.pl
mysecretary-payments.duckma.me
laforja.com.ar
share.bigteamchallenge.com
www.follis.ie
www.weunite.in
efoh.xyz
scanydrive.com.br
clocks.sipofcode.com
web.togethe.re
hkmassage.com.au
stylexplore.com
futurefox.co.in
360concrete.app
web.seasonshare.com

Certificate

The complete raw certificate details for *.duckma.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGq04jCImjCwt7LA6LTe
4i7ut/kZCu/Vku4bPR/g3u0+gCxdWnDAeYwyxNFa8s7slvtZ8K5EatRWPVgfnO1T
T48FNec7I0e+yJsvibdbCMTm3hgB4yGsenc7ewd6+UvPz0IfwXhwjmyPm7F+R0jl
UD14rNOQylRwh2wKK/uOxrNR3Zc30h0Yt4G3+J6N8H627DocxwjjnywGhYO/YyW6
hMlq6mDUE9nhcoYw1Ziw+aqGv8p3v2wXT26J1mFJwI/ifBeRFTQEbCaGf21sArHp
O7JwPh69W5cPYFgA/QIG7jL2E8NEoiGybuGRz4Ocyxrmy/H2mxVivv36dqPTbY04
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12074744785114534940002312279216830276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.duckma.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23785420307567598945499489177404967007876794966587746298159651065695604107950089161616451173097848659293105204680909237021340425379155323592364421442520635802484227448949295659301051595460086728636613017596681603487245971007276662405087663490174074750768214595095903244653552448590620118553490587448205081545576222865954564077096364847907514114665100403384960596103479844314349786704645063789342776722330224155342465828783881159800691042373811631115389699370756965923388704979454338444815184911969501932614078065155278997693508943699016189069795236456263074664637873485738563186432227510351216071474209077372929259661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f9a84c2df4689c30419934ad1be56314fcfd2c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duckma.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckma.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166f88fe1500000040300463044022007dea5daec5551417d9389bdd50c6a6ce8c82819dce1e6e41fb652e10b04b396022009752cc536cfc8596773576411de6a8257a5bee46ad539872ce3675ab9db0931007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166f88fe1980000040300473045022100aca362ce35b6ce7cba6a9c4d007668ca00fda197bd1a75adaf15a84b9e2d351e02204628abecaf04555eafd78e25d1c51c012ae52d2ab89aade514e7252e0844a298
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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