*.loyal-solutions.com

- Sisdam S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:f5:61:9e:df:cb:25:77:3f:b9:a9:c1:bd:c2:d6:94 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sisdam S.A.

Organization: Sisdam S.A.
Organization unit: IT
Locality: Buenos Aires
Country: AR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f5:61:9e:df:cb:25:77:3f:b9:a9:c1:bd:c2:d6:94
Serial Number (int): 17224828660802000768488137928401409684
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:22:2f:61:de:ed:a0:2e:95:6b:22:ea:56:16:78:1b:f8:06:90:c3
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): db:1b:c3:07:f1:b6:7b:35:86:73:8f:01:ce:05:4b:9c:64:a2:0b:ec
Fingerprint (sha256): a7:6c:aa:a7:07:8e:62:c4:60:6b:5d:81:41:d7:cb:09:72:85:96:c2:9a:73:cb:45:5e:22:d5:24:44:63:14:93

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.loyal-solutions.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.loyal-solutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.loyal-solutions.com
loyal-solutions.com

Other certificates including the domain name loyal-solutions.com

(limited to 100 certificates)
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
*.loyal-solutions.com
soporte.loyal-solutions.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
www.loyal-solutions.com.demoedrweb.com.ar
fdus-32.freshdesk.com
soporte.loyal-solutions.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
*.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
*.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
soporte.loyal-solutions.com
soporte.loyal-solutions.com
*.loyal-solutions.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
loyal-solutions.com.demoedrweb.com.ar
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
*.loyal-solutions.com
fdus-32.freshdesk.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com
loyal-solutions.com
soporte.loyal-solutions.com
fdus-32.freshdesk.com

Certificate

The complete raw certificate details for *.loyal-solutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsHZK4DgQYmSEC3u63K2
PwuzA7EudgbW/AKHpvNJ3XPwqI72dssj08PXT5UCP6X/B3mAQiyevRaJYNwlZzro
IInBWeTiB/RsqupSvaJK78pVGmnFYYK9O8kjb5l3JgCjoBJBi7ca+zetF5FBeYgN
xE6wtA3s39Kio56E9JYuLkFh8EjX93LatNrlBBEHmbe33SW9exfBISyPT5bRJSdk
4SOw3nXmYyIibZD6UOPgGVA0RZRDswxBtu/iJ7kRyYvZDG7cEFlzKvAgk6TVYOD7
hWfDXliq/ccIFUXxEsJJqqOkr4qZ5cMGBRnLfo8uVnsJKME7Xsq2CAIxHebou3wJ
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17224828660802000768488137928401409684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buenos Aires'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sisdam S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.loyal-solutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21556102013545723922801945459827547645623160795747215100942215467082512603742541893894929952887485202171026421085469942169086559486359238892816803674193702903116406642303734247337179619979488809625695468319118977053156610489847224957975256971024990931860313402336479974817993810912749123857338621365990469038202425861141849843924860265743540042125524459429941000808167861307725028173015948755946676102475122257068743451220400977458851555203212747903996436797635206608962869014627925304339635975931495329262352272877934901285759708740904339230353215035910729504183118147785457815888846625212244786578881260646018320813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0222f61deeda02e956b22ea5616781bf80690c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loyal-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyal-solutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011572a13e9d1344dd0da3c707789668cd991d94e8e0208572bf5b836c86a3e3bd4738f92883f7c5472157ebce09f6bbd902d0cdcf9acac49df114f23151e9ed16ab3e597bf23eb2badd3d984d7f62d2a841f8a112f4485ce9f56ad8cdf4a58e8f7a82ffc37e50df1a842336726c681520e22bd196e6f85d6504b4cc536db0899d90bb06be34144ebd3047aa5964cafbe1d779bacc675e9dd70caec8e4a33b8bf2810336511300dd39f9b459ef1e21d1d2aa30d15566c73b464a324f5942162bb4bd9687fd6b1ea703355b4dd11f4603baf719e19cec633c801363b96b4a9e53a7439bd7a92250bf3fd8e52f2c5d2e32f588f452a933f6a2f9e2422b7b3939584