justin-legal.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:bc:73:4a:0e:cd:6f:22:8b:6f:53:4f:8b:7c:e4:63 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=justin-legal.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:bc:73:4a:0e:cd:6f:22:8b:6f:53:4f:8b:7c:e4:63
Serial Number (int): 3636946145543970088067151161104065635
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ca:6b:65:3f:a9:7e:44:ed:2d:1e:2f:c6:d9:dd:d9:14:16:e2:e0:6a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ee:2d:fb:20:9b:49:81:b9:a7:59:50:11:07:68:e3:a2:98:d1:e4:19
Fingerprint (sha256): 9f:68:55:5a:a7:1f:9a:12:cb:82:55:c4:eb:7f:1d:1f:d9:5c:fe:f1:dc:23:b3:56:99:e5:b1:b9:f3:d7:62:fd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate justin-legal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justin-legal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justin-legal.com

Other certificates including the domain name justin-legal.com

(limited to 100 certificates)
assistenza.edilbruny.it
asup.fancom.com
assistenza.edilbruny.it
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
assistenza.edilbruny.it
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
asup.fancom.com
support.manstein.at
support.airgp.co.uk
support.airgp.co.uk
cetec.support.arlian.fr
support.airgp.co.uk
support.manstein.at
helpdesk.itconsulting.cologne
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
support.manstein.at
assistenza.edilbruny.it
cetec.support.arlian.fr
support.justin-legal.com
assistenza.edilbruny.it
helpdesk.pumtrix.com
support.lnmlaser.com
helpdesk.pumtrix.com
assistenza.edilbruny.it
justin-legal.com
hseq.naturalpower.com
justin-legal.com
assistenza.edilbruny.it
cetec.support.arlian.fr
support.manstein.at
support.ti-medi.com
support.lnmlaser.com
hseq.naturalpower.com
support.les7royaumes.com
assistenza.edilbruny.it
support.justin-legal.com
assistenza.edilbruny.it
hseq.naturalpower.com
asup.fancom.com
helpdesk.itconsulting.cologne
support.justin-legal.com
hseq.naturalpower.com

Certificate

The complete raw certificate details for justin-legal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/dsRiqGtZlkBMLd/F8C
EhOE2GWW2X+H4GK/pzCChf7XWc0KPENFAGyqaDuppiFjAiTNsulKJhjPd3h2ni0O
T64d8Orl98Wksn2RBtV7AyYbyLglNN0MZKwPXCTEDy1SwChx4EwbeXwmiy6MCpKR
OxYFmzuwsyfaI2vJGMl5ZjBpSGI7a3RXXozOGUx4JuoJNxJPaAgGijMWxMUBiNV9
3/sqwVi8bZ7LLd60+1aJ8TcRbQQIOLGzaaQKjXiOrSS4WEnC9c3z3L7tTlIXQoNh
O9+j6VWywOBkiKH3u0iAkont3L1IkaSDnoXr8t40Lpyx2KyhTIHrSV01RyQPo61M
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3636946145543970088067151161104065635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justin-legal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28273150809261402768723109436776710259101090760534857070386445638652313042727491867021496806099880427389598638589823155225994352761798391927297967119260376706083260033235548746880323684868536876217007653405033332156860680922694058587159344750978698388917868582650878059162626882785305591867661208477814087252902476022750180476326522673221407150561825499591965902397866599397022500665290783601118085878785688958897752669798307944950401684051738288071283051416808101354041857908581433905705393441992396254024422879736312327504712097314153732539735729050086067357433252706393912221421119803307271570141845311919703804941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca6b653fa97e44ed2d1e2fc6d9ddd91416e2e06a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justin-legal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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