justin-legal.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:c5:ce:31:58:fb:ee:69:ed:cd:04:59:ea:3f:db:41 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=justin-legal.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:c5:ce:31:58:fb:ee:69:ed:cd:04:59:ea:3f:db:41
Serial Number (int): 15648572520862998210090306284497656641
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fe:7a:ba:b7:c8:e6:30:1a:57:02:e5:a2:7e:c3:28:69:49:08:ad:39
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): e9:f7:ad:4a:7f:27:ff:7d:a3:5e:7c:eb:0f:99:83:e6:2e:76:2b:63
Fingerprint (sha256): 9a:02:b0:a3:80:b9:b0:8d:cd:20:29:68:0a:55:e4:0e:10:d3:cf:bc:c5:95:0e:05:38:55:25:e5:97:f9:b8:6b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate justin-legal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justin-legal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justin-legal.com

Other certificates including the domain name justin-legal.com

(limited to 100 certificates)
assistenza.edilbruny.it
asup.fancom.com
assistenza.edilbruny.it
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
assistenza.edilbruny.it
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
asup.fancom.com
support.manstein.at
support.airgp.co.uk
support.airgp.co.uk
cetec.support.arlian.fr
support.airgp.co.uk
support.manstein.at
helpdesk.itconsulting.cologne
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.justin-legal.com
assistenza.edilbruny.it
helpdesk.pumtrix.com
support.lnmlaser.com
helpdesk.pumtrix.com
assistenza.edilbruny.it
justin-legal.com
hseq.naturalpower.com
justin-legal.com
assistenza.edilbruny.it
cetec.support.arlian.fr
support.manstein.at
support.ti-medi.com
support.lnmlaser.com
hseq.naturalpower.com
support.les7royaumes.com
assistenza.edilbruny.it
support.justin-legal.com
assistenza.edilbruny.it
hseq.naturalpower.com
asup.fancom.com
helpdesk.itconsulting.cologne
support.justin-legal.com
hseq.naturalpower.com

Certificate

The complete raw certificate details for justin-legal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMQ1S51zIZjzh1slLNna
jCQXK+H8ru49rwZC2nlxJoLZuMsXjpdesbUO+FNAQpVfkRP4DBu3iUR56xXabNX+
3HxM91yIdd2gTtGY5OxY8KQTJmo4LJiAfJZEjZJEjBxUYnlB4kJ4smZtcOqXFxwA
HZWAQD77ie3ibWzVv9vRARoZ9xkLdKA59vBsZvLi2KzyTKrzBMvbQttCxssb5mK4
C12/TxxnYT55DsGbcScChtnLXW2Hc1QzyJudxB1bhYwHcgaXWhLB2uCT4hNqsu5M
ot+Jk5xIJe+9YnAnckKTfsprSrgCDLFxGboLYlbo/NgXD2azE8MWYJTy/QLwoj35
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15648572520862998210090306284497656641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justin-legal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25849368075186937863795008396012859185252710489837212661375533727666450065900834688835202444169933542469721262133381906175648306564395232173233579716673755593535625152827509534964014590132496762611645309728984246536003013749596752659098334649917038162655994864853761510502724624294246619036048884537550681761048026705238821314302748029651903760132938202905927700387035069736573051557155993011996106907905573086796956245640933028664490491415767064325877112948737338116301283911577404087330371989047682316639671157295013505760092187806886916617580451501614944924190658874143377577288826839725324331939666568385589541161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe7abab7c8e6301a5702e5a27ec328694908ad39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justin-legal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008c63e00660eda998bca871c91759b8ef486139557e9fcdd5c5840f481d2eff5c3cbddebf821eb3992a43c7d654ed982ecd1fd2c684b45215de7983503e5b3f0da4905be7f08cd64e051885af29f03817ab5b4fbfe177758431526e747ef366c3e830e3b7ef06da275b06680061158d63729f165dd5621d8d5e1ce6f7dd67cf2ebc0a17c750f3bca783be3b49d6e327f68f7acf02ccdf8e5b42234ce5e93a6709654e6c587c3e0698b2d5276fae5b887a458346d2d9e627a86fac3cfdc5a158efc98956eeae65a2ca7a29114f159041c569608f844c564419a160f885af219615b09e52bac618257924d6c8ff5935d5cba9d1ac6c2138e16a8ce970a49ea833b24635e39cf633568cd27ae2d5bd8ed3d3b285f390c988dccae7439550c2326cf793ce10a36ba295e41e71e253c60fabb8fc21860e75a128c746f013e0e62fa3d39502864927d06a9b9a4b901e8c55082e2af6b253e00489f8092860e15b716249a4ed84ec73e7078d3240a87ace6b3d4b71cb81d0f00b5020397e86b8ec022a910d413692382e5cba0f693bf18976c90f72e95167b95634b43f959a0cd15a1f9dd67db0d598f2df61a6042adcb1af474d4945fc9aa8e875b1bb053755dcdee9726f9bb7af323cc0309bad819802b3ce99baeb065a892f1e107509f5bb84c2a6d88da34977a5e0d371a8a8da60308c50ac8f219357e06789fe7105976659d37caa