dedesign.dedeman.ro

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0f:23:9c:b7:b7:47:6a:c8:14:8c:3b:65:bb:9f:aa:f0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dedesign.dedeman.ro

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:23:9c:b7:b7:47:6a:c8:14:8c:3b:65:bb:9f:aa:f0
Serial Number (int): 20123328938196461623690997523437038320
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:00:e0:3f:7d:3d:54:e0:a9:1d:89:70:f1:4f:4d:37:f3:15:5e:b8
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 76:9b:01:6e:c7:89:79:b1:a1:cc:d2:8d:44:e8:36:ba:84:79:3a:c9
Fingerprint (sha256): ac:99:59:f6:78:24:7f:5c:14:7b:d2:03:f1:60:d3:2b:03:55:ea:75:34:ff:f1:c4:a2:e1:1e:f1:0c:97:4e:da

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate dedesign.dedeman.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dedesign.dedeman.ro

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dedesign.dedeman.ro

Other certificates including the domain name dedeman.ro

(limited to 100 certificates)
furnizori.dedeman.ro
*.dedeman.ro
*.dedeman.ro
recrutare.dedeman.ro
social.dedeman.ro
*.dedeman.ro
*.dedeman.ro
*.dedeman.ro
recrutare.dedeman.ro
recrutare.dedeman.ro
*.dedeman.ro
social.dedeman.ro
recrutare.dedeman.ro
*.dedeman.ro
*.dedeman.ro
furnizori.dedeman.ro
dedeman.ro
dedemax.dedeman.ro
dedeman.ro
*.dedeman.ro
furnizori.dedeman.ro
*.dedeman.ro
furnizori.dedeman.ro
*.dedeman.ro
b.dedeman.ro
dedeman.ro
recrutare.dedeman.ro
recrutare.dedeman.ro
*.dedeman.ro
dedeman.ro
dedesign.dedeman.ro
furnizori.dedeman.ro
b.dedeman.ro
*.dedeman.ro
dedeman.sincron.biz
furnizori.dedeman.ro
dedeman.ro
recrutare.dedeman.ro
recrutare.dedeman.ro
furnizori.dedeman.ro
recrutare.dedeman.ro
b.dedeman.ro
dedesign.dedeman.ro
*.dedeman.ro
dedeman.ro
*.dedeman.ro
recrutare.dedeman.ro
b.dedeman.ro
social.dedeman.ro
furnizori.dedeman.ro
b.dedeman.ro
recrutare.dedeman.ro
b.dedeman.ro
*.dedeman.ro
furnizori.dedeman.ro
dedeman.ro
*.dedeman.ro
recrutare.dedeman.ro
b.dedeman.ro
dedeman.sincron.biz
dedeman.ro
*.dedeman.ro
b.dedeman.ro
furnizori.dedeman.ro
*.dedeman.ro
dedemax.dedeman.ro
dedesign.dedeman.ro
recrutare.dedeman.ro
*.dedeman.ro

Certificate

The complete raw certificate details for dedesign.dedeman.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20123328938196461623690997523437038320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dedesign.dedeman.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918153563861372738296841458325375282058974110042420414890814276573384963372905726869450942524455765133213717592245162060902024614128083576800594223987950619846684197974756384084727226802073278628244867396993782417546007406752211256402148733765831650659186899315197879849522501479324415147629406712373683250680049584587479520883987151433878343317587844617482004004717454125408945530972449861715049313919408438992270952720906552530766123013668255124830887301011622867259901032777277709163510416149819801340095479931889842497622270681692590616149398241963922359841580743244409382933136296088223607803003854149440033431817961331751754106661899181758271954121425212596534170055824975148803830713533013072594837760405394047465072173933022675073577441181269933743212253258732979454339733304872217664095459645282882193507901469480672962223100652400925452417277105934194015369963226528487907734519068338024527306486569622177054710869181249748115983045345424858479304069709303642642727442915238294020637311339672934019161536937795317691708302464245959908734722876845043700552542364027422143640097714161079695052308045272928120775529806818907007055010664570028200893522040325378286779953199545444426462107665934596824862476454032140308776499403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc00e03f7d3d54e0a91d8970f14f4d37f3155eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dedesign.dedeman.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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