artmarketing.com

- ArtNetwork -

Issued by Trustwave Organization Validation CA, Level 2

About this certificate

This digital certificate with serial number 06:38:66:cf:02:f5:84:9e:3f:19:2d:81:59:f2:e6:3c:c1:a1:ee was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ArtNetwork

Organization: ArtNetwork
State / Province: CA
Locality: Nevada City
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:38:66:cf:02:f5:84:9e:3f:19:2d:81:59:f2:e6:3c:c1:a1:ee
Serial Number (int): 138717743170347667024613177704087462606905838
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 88:1b:5c:fc:7c:53:31:9d:08:fc:de:28:28:84:0b:7c:9d:b2:99:43
AuthorityKeyId: 5d:d9:96:9a:40:c7:27:cb:2c:9b:a2:ec:cf:19:ab:c8:af:cc:86:48

Fingerprint (sha1): de:ff:6e:bc:bc:90:b6:55:03:3c:03:72:99:f3:4b:68:94:5f:01:17
Fingerprint (sha256): a5:09:92:d0:af:9d:2a:74:e9:55:20:20:79:a5:ef:a0:26:86:df:82:a3:ea:f6:34:69:9a:e4:92:33:fa:32:2d


Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA_L2.crl

Check the revocation status for certificate artmarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artmarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artmarketing.com
www.artmarketing.com

Other certificates including the domain name artmarketing.com

(limited to 100 certificates)
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
artmarketing.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
www.artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com
artmarketing.com
artmarketing.com
sni137559.cloudflaressl.com
sni137559.cloudflaressl.com

Certificate

The complete raw certificate details for artmarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87EuZ9OZwgYXzOGI0tsH
ObAukwG9WDwb9rf3z9o9Z2PzqOMY1TKLQZyms+IKFMgK0TEa3JLzRZkgKHYbimv2
Mspwb3TzgS55lqRlb9yvPHU1UOGosP4zUO0kRysWTI1OaGqj1GUjKFwG7aCzlKFr
4CDhKBKsez0QdGVQvEysP3HvDLWMRHCyQbXbIm1qRDyQ4yo2Mp+bH40plFbvuGaw
7gdO34ywYPwj2bLaQVKHOj0fOgfpx49c3DC6nfhp+QTnhR+tVGSPAixjcvjvQenZ
pVi9CmbqRcCFUVxdUcoDIf/0dQcEGX46fCQK40l8ERDN5X/uA2TtsUmXbRxDds42
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138717743170347667024613177704087462606905838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation CA, Level 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-16 01:03:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-18 07:03:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'artmarketing.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ArtNetwork'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nevada City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30763279448235366682994420022771255468409109714653322751494187147121878956221715684205944481570562833812576609669110204792582630326992990775588723472854407280303097698460182028418370045046827003304556884529089155903791231380137021625310685997771664450184862679270568256096193003781689145303058688903931576098920539959499031242134064558100242206305951144763032480783679657059198009928244682489765864853231855156084962451388919777554874468563898031647040237055681218754764706253522676062240303400697139687801272314557094378820010238441353018691257217282333220669858950452319890789814615734945103534931594226324657288789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							881b5cfc7c53319d08fcde2828840b7c9db29943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5dd9969a40c727cb2c9ba2eccf19abc8afcc8648
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artmarketing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA_L2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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