weareavidity.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:85:3d:76:89:bd:d5:fd:94:63:02:5a:93:41:35:19 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=weareavidity.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:3d:76:89:bd:d5:fd:94:63:02:5a:93:41:35:19
Serial Number (int): 4679506088077822995604607753751967001
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2b:ed:9f:f2:48:6e:a3:55:14:fb:a8:9b:dc:c0:7a:9b:ad:2a:05:72
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 99:2d:7a:09:55:83:0d:b3:75:c3:18:01:e7:59:4e:57:5d:ec:ab:aa
Fingerprint (sha256): 96:d8:bc:dc:a7:6a:6a:a0:87:26:cb:9c:be:10:57:e3:34:b6:c7:66:f1:f2:35:50:cc:9e:60:0d:63:ef:78:b8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate weareavidity.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weareavidity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weareavidity.com

Other certificates including the domain name weareavidity.com

(limited to 100 certificates)
servicedesk.weareavidity.com
servicedesk.vretigas.it
weareavidity.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
helpdesk.bedes.org
helpdesk.hambroperks.com
helpdesk.bedes.org
assist.pentest.partners
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
servicedesk.weareavidity.com
helpdesk.bedes.org
helpdesk.coulisse.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
sdp.vdp.com
blog.weareavidity.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
assist.pentest.partners
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
weareavidity.com
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
assist.pentest.partners
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
weareavidity.com
helpdesk.wentworthclub.com
helpdesk.wentworthclub.com
servicedesk.vretigas.it
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.hertspartnership-ala.gov.uk
helpdesk.saviaantjes.be
assist.pentest.partners
sdp.vdp.com
assist.pentest.partners
servicedesk.vretigas.it
helpdesk.hambroperks.com
sdp.vdp.com

Certificate

The complete raw certificate details for weareavidity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kdUSMgAJ0pXsAOiX6Bk
Yy4QDxF3jOeJszXDjOjYSWEurvWDowrbK6BpC7mD3CF1jQ1Lee7RuE+OdyZu8LZw
jE7ZyBlZP+eG9+XtZANu8D7dKH4NI3anE4ZVeyXouYMG94demjY+sdZjRx7negH3
zc06UzBjbWcFPNA+s0is9tWYa3TxlMohHND5YYrKAMP+D4QG6GaCmbtFXCN6K0e+
VkCidCcXNyGpacd1WoV8qpzHY6no7H6ZMwDuszyAzwyek0vGLp4j9fTz8ESI/BNy
LSfbpg6nZXZeIVhy5n4dYKUp1H1l7apFMGckJ7kJxA72C76A/ha+cgUFwA6WygqZ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4679506088077822995604607753751967001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weareavidity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28565030679324692211652768578182706801856432054877448365162429513272521954957992916788885142578300730639901384174058958568449040586579373840910864336247277793407371144138026794163860095378031432428432844798137321345183910507881412157180166939787520663181479633859329722359512140465679371188362206380035212548622057280559944920686949215554896018681545850628496214263280294300843792847297026866928597621038058289385988736040085872270458198781730217787546444692675343811943918072700759909847961954605737468495632001212131303797689013023170231293047231660385071899851383715117467087867788062046258477654884945575319083417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bed9ff2486ea35514fba89bdcc07a9bad2a0572
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weareavidity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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