www.monumentregroup.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:e3:0b:7b:72:5d:b6:e0:59:b3:40:8e:a5:52:e9:ed was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.monumentregroup.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e3:0b:7b:72:5d:b6:e0:59:b3:40:8e:a5:52:e9:ed
Serial Number (int): 21117304210625358218213350002459339245
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:24:fe:3f:45:1a:be:c1:eb:e2:20:6d:fc:1f:69:dd:b6:59:53:bd
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 90:85:37:85:e8:55:16:51:f6:6b:d4:ff:b5:94:c0:4b:29:ff:90:8b
Fingerprint (sha256): a5:72:9d:96:62:86:f6:58:f7:77:96:12:8f:c2:8a:b2:7d:ee:68:99:be:b3:cc:9b:48:4a:7a:da:c7:9e:53:d9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.monumentregroup.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.monumentregroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.monumentregroup.com
monumentregroup.com
cosmic.monumentregroup.com

Other certificates including the domain name monumentregroup.com

(limited to 100 certificates)
monumentregroup.com
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl

Certificate

The complete raw certificate details for www.monumentregroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CnG2qds39RhWR66u04v
u6V2INyfp2cmryDsWruEU5NQvEDtx+uk9ZUqec+Oy0rtyr4UDg+XkG0wWbQ6UUyW
yMzN/gg8U/gvxm1YjVeR4htBEDDz/1OiwqEdj/QE2H/q4MeRlbu5zNkC9lUYBWo/
m4ht9TBrc6TyTEIMlkb/MttNNQ0sLx2AeBW8f85bHFmZUwMLmj7InAdVwzrkDvay
aiIKN/9KxQJO9VuttVru3gbwM5vwnyq2lVdF3dz2MxULlFS4ePkp09wNvAllAD3t
1PCdZjJda3VswPpwQVnPTxSeg4jAjL2DMk0FlPNJaJTil/nFG9XOVrH6kftv2kQA
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21117304210625358218213350002459339245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.monumentregroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26783121547818092301528328593092952173568241082801201820121428549716127650557638481507895245715017968671885195908372176554262336665965024476655140906572834182961419830765183230666882292880034039003483475992888719984758634964688897873921712593116292624764571833991412352920528629348489576174200641806188758077161644987326452628863482840886510630794221404773425184008655337513159047922802763048158238415096340055872834002046707399124917640180222635221762738576072282952489702758354267238088545042391111384107352200760718593705654136695445178726913834816100682930549891931493362472173613152724777726295437471413671559271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a324fe3f451abec1ebe2206dfc1f69ddb65953bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monumentregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monumentregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic.monumentregroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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