agrotv.agrositio.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a0:3b:c5:bb:00:9d:41:06:8d:33:9d:ac:99:f5:09:e8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=agrotv.agrositio.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a0:3b:c5:bb:00:9d:41:06:8d:33:9d:ac:99:f5:09:e8
Serial Number (int): 212986835290788512469553073626929236456
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:14:13:54:91:fb:dd:42:28:03:1e:af:d4:fb:14:b0:4a:b8:e9:0e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f1:56:b3:1a:9b:5a:14:8e:a9:0c:df:7d:00:ef:1c:10:01:fe:76:92
Fingerprint (sha256): a8:7a:3c:13:db:28:be:4c:cd:87:b0:f1:a4:84:28:b2:90:05:4d:3c:54:02:39:87:2c:c9:3e:e8:d5:b2:37:34

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate agrotv.agrositio.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agrotv.agrositio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agrotv.agrositio.com
www.agrotv.agrositio.com

Other certificates including the domain name agrositio.com

(limited to 100 certificates)
agrolinux3.agrositio.com
agrositio.com
agrositio.com
adserver.agrositio.com
aka-agrotv.agrositio.com
agrolinux3.agrositio.com
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
mail.agrositio.com
zone100.cepi2.edge-cdn.com.ar
www.agrositio.com
agrositio.com
www.agrositio.com
agrolinux3.agrositio.com
zone100.cepi2.edge-cdn.com.ar
agrositio.com
agrotv.agrositio.com
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
agrotv.agrositio.com
zone100.cepi2.edge-cdn.com.ar
agrotv.agrositio.com
zone100.cepi2.edge-cdn.com.ar
agrositio.com
agrositio.com
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
agrotv.agrositio.com
www.agrositio.com
statics.avstreaming.net
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
www.agrositio.com
zone100.cepi2.edge-cdn.com.ar
agrotv.agrositio.com
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
zone100.cepi2.edge-cdn.com.ar
agrositio.com
zone100.cepi2.edge-cdn.com.ar
adserver.agrositio.com
zone100.cepi2.edge-cdn.com.ar
www.agrositio.com

Certificate

The complete raw certificate details for agrotv.agrositio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SGSc4IOhs66b7y+DZbG
qPc3s/iqnscHbIf7pCAn2QNSTb5BPn8hNSFxEcdrCoDP/Tyj8Sk5DDmfayx319OV
59JOYIDxfUl3oj7z5g1XaV65Qc2ZAqRxbHD7GhGDIvFlZubhT5EJNP6gRsnUS37m
MG+eIu3VxY2ar9eyGm9b5W9uLJAv2sRLAMXxTk3RVDxNcA4DGacYzc/muTF0bTaj
pmtoiqWxyhzavnHQDszxWtUMAExAInsP/URzRJCd2D6OcY0V0Sn+B8GQnM2Yhewt
DJlqOLCxaMpaCdhmIUoSPe4TqUdsRszSFwUo+qVTGUsNDDgBH0sEAvHEzeZzl9T3
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212986835290788512469553073626929236456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agrotv.agrositio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27915220404701299991925912298187033352099707785920522788252670608587745764557262396982189116906114591173446631320828213806208688821564791984899683143695064076582559110931214045647412621457138151461983665732410676971343018156097457739708615023500817046851422415007710953075549332527111444021412964139679340608200208540936346807089902201956232420048630314452067809368567727922489038492302023364086790506158354056673602597224182682011120673517771111057166949018288057469468144224693857845681947125534759439764009266174709808948882790204817013952848985052149852332183484966337837626579106692098356274209683567143290206071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a014135491fbdd4228031eafd4fb14b04ab8e90e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotv.agrositio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrotv.agrositio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004189e50a29fe5858e05c38caced4f25f83b68d6f4842c22b8d596cbf1992e8cc4b24ee69261f3e3df697372456f6fc1f3758030b295acbd174447eb5b698680fee4cd1a996b4541ef89a2c8fef9a584e0edf509dda2c4c3f388fcfb557fe2645729adb57b95e16016a48bb35f3f07297d0d737e21db687bfa47e82baec166591831576c68f8df95b749e05954fd860130e6883fb64203e981f9822e9ae9d04c2c6904dc9cd4ddf787749d21c7da95a2d0b1a4e0a0856f3133d80f54726b1831bd7ad124d56f74990b8b8203e6c2d19d4df7a6d4124bb3f964a982efcc954accfd5b82edd9915fcdd81227ec1606ea81fe0b845b96f137a80ad7fd95dcade216