goldenbrokers.my

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:e6:73:84:f3:e6:60:22:64:5e:89:a8:47:1c:56:b3 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goldenbrokers.my

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:73:84:f3:e6:60:22:64:5e:89:a8:47:1c:56:b3
Serial Number (int): 6513483271307909977870798488354969267
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 66:b9:3c:3b:66:2b:11:5c:66:8d:85:d4:89:23:cd:af:29:9a:34:e3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 24:8f:32:5c:bb:cd:04:b4:d3:12:1a:b1:e2:86:ed:e6:be:97:74:75
Fingerprint (sha256): ad:e2:52:71:b8:ec:ce:d4:c3:51:d4:d7:b3:23:b0:4c:0e:e0:4f:f5:63:f5:b7:5f:88:aa:ea:3d:8c:fa:8b:04

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate goldenbrokers.my

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goldenbrokers.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goldenbrokers.my
www.goldenbrokers.my
my.goldenbrokers.my
backend.goldenbrokers.my

Other certificates including the domain name goldenbrokers.my

(limited to 100 certificates)
quickrisk.module.demo.pentech.hu
goldenbrokers.my
www.datalire.com
datasaurus.us
haby.academy
www.yaytext.com
app.goldenbrokers.my
action.tatianatsoir.com
eventdrc.com
goldenbrokers.my
phadonia.com
www.liveathome.no
www.liveathome.no
paringandhi.tech
stringdb.com
datasaurus.us
hub-dev.frend.app
action.tatianatsoir.com
goldenbrokers.my
eventdrc.com
quickrisk.module.demo.pentech.hu
goldenbrokers.my
paringandhi.tech
goldenbrokers.my
goldenbrokers.my
moontracer.xyz
malzama.axenda.app
malzama.axenda.app
goldenbrokers.my

Certificate

The complete raw certificate details for goldenbrokers.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArmrn3hV2NuigqC7QIgMJ
X/hEcw64Jdh+Ect3fPqL5bMYKb0qkk40YIpnWDCVHCm5ExOqVM3ca/LE4H7KRO8l
O/lu40nmXTVTWEpl0X4YwdUgmggTh8KpETHcbdWApR1ZKWMdYbyeCFiOP3JdboLJ
jW2jAZpMI4cUKHcXo3X40rIhIVCvnuR4y9O+3jFp16w4kIRs2Tndzwqb8cZ2aSS8
AqCqWBEUcalK2cDRPOA/i6zzxFN5OIxE4jSHTufa7B1VcxuVBnRV5MG0k2LfHabE
vP/0oiALJQdM32ityDzqmu6lHN7spE14ej097Ay3Quxx2xpF5fIhQGAQsIXGSg8w
UCtKWVUBaXChhCDQG548OTFQ+6w9EU9YbD6wxmOqd4Qa6dbYmM3dJ2VnayZzKbBX
MTKBKxNGm5Nwx/ywz04FjsvQZKYyTSYCAz5L73djkhcy8wRH6SKtrrXiFDsKbGMZ
iBaieXvj23ZkDuQ7362cCA3MByI2PjI6RmN7tWkWDBpDV+Ide7Rsfg9tq2nSCang
lQQM3maCCfNI2NGuYJUKzErjq3KAOk08pOQ0dce2lkOtTtcUm7t6pcH+g8KZ1hWP
tXG37hTd5yyCDrYVBVuzmiI30Gaavha2/mjNUbLR3sCDNzeWJf51pvCTdA77OoiC
Muockr054M73gpDx9b7svfcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6513483271307909977870798488354969267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goldenbrokers.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711561729309529373412948914637505613963008551318651579935189016752312066873477485946673601731227161440911780135457723532429126855271716432301849773567749277033913256775173881690192615746088358869743442871719036931075299350936884416236398830020676791789684555048080419512576319219571093045609409900422944948299094458465688899470165072197601585443996294450842551336893335802954960171139283578072750114830498813106383744281376990295456323021922298543858052361041089404473456908225365197978187240890125745846674089720947119248862465252740884375815601293641351151770424221744361153668181094587155080893184475632282546669595073708428608314986220504846687650851333950344748211339335316394498419046650039980297535890434568101853714270117618194200046680823144860587164156941002313969533942971922880542501331396093625295400517387403465856695874969476748023325289104985195375664791373035973455907886382343432162063692803059941922997647707661958556575078270894073935126358483771541341716709131467892776430409466828915140947748600920393943558845729393468294971292235400116705577032583471134720699094481063457624111654612278387686981198004983131991089332119886161481149905702850102065109794440009259384688639123491807081095526242062734079814319607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66b93c3b662b115c668d85d48923cdaf299a34e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenbrokers.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenbrokers.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.goldenbrokers.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.goldenbrokers.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016c95a22aed0000040300483046022100f84d6e3e23d07299abf22bc4b7b02546cf3e5beadf969820e4e4db574844b27002210096a8d4ac73755a2d8105004a4f48fc884f7c64bf92603be3d4932d55077d977a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c95a22b390000040300473045022100fc09f58cacdebd2ea43f2b5faf06190e3a85e8f482df5b706f79aa8d571660c302203553a01a74a05c7a6dc04bf0eda4cc1586e3721a9ca3331eb3602bcc6aff3311
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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