*.okdiario.com

- Dos Mil Palabras S.L. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:f6:4e:23:79:94:ef:51:6a:c4:c3:58:d2:86:2f:d5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dos Mil Palabras S.L.

Organization: Dos Mil Palabras S.L.
State / Province: Madrid
Locality: Alcobendas
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f6:4e:23:79:94:ef:51:6a:c4:c3:58:d2:86:2f:d5
Serial Number (int): 10583485836256488893644918277536100309
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ac:35:9b:03:c3:d9:4a:37:c6:00:76:1e:74:12:39:0d:03:f4:0b:68
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 46:3e:a6:1f:5b:f3:fc:f3:b3:96:6b:6d:1b:3c:c8:06:2b:e6:d0:3d
Fingerprint (sha256): ae:05:8a:25:48:ee:25:66:36:0f:af:3d:00:1a:f6:b7:08:d3:75:e6:8c:37:45:55:39:b8:20:08:34:e5:cb:4a

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.okdiario.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.okdiario.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.okdiario.com
okdiario.com

Other certificates including the domain name okdiario.com

(limited to 100 certificates)
vibes.okdiario.com
*.okdiario.com
ssl368696.cloudflaressl.com
sni.cloudflaressl.com
*.okdiario.com
support.intercityxpress.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
dogs.danby.ny.gov
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
billing.embark.fm
cdn.arkadiumhosted.com
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
ssl368694.cloudflaressl.com
plans.flowgardeners.com
*.okdiario.com
cdn.arkadiumhosted.com
ssl368696.cloudflaressl.com
subscriptions.wstwn.com
cdn.arkadiumhosted.com
*.okdiario.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
support.techprosecurity.com
inconformistas-area.okdiario.com
pre.portadas.okdiario.com
inconformistas.okdiario.com
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
ssl368695.cloudflaressl.com
ssl368696.cloudflaressl.com
cdn.arkadiumhosted.com
help.bidorbuy.co.za
*.okdiario.com
subscripciones.lkv.cl
billing.ipfy.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
cdn.arkadiumhosted.com
sni.cloudflaressl.com
subscripciones.lkv.cl
inconformistas-dev.okdiario.com
cdn.arkadiumhosted.com
*.okdiario.com
subscription.eklavvya.com
inconformistas-dev.okdiario.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
ssl368694.cloudflaressl.com
inconformistas.okdiario.com
cdn.arkadiumhosted.com
vibes.okdiario.com
ssl368695.cloudflaressl.com
inconformistas-area.okdiario.com
pre.okjuridico.okdiario.com
ssl368694.cloudflaressl.com
pre.usuarios.okdiario.com
ssl368694.cloudflaressl.com
subscriptions.cabmastersoftware.com
jayash.me.musegravity.com
*.okdiario.com
support.proovstation.com
billing.forgestop.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
sni.cloudflaressl.com
sni.cloudflaressl.com
okdiario.com
cdn.arkadiumhosted.com
billing.smartsp.es
jayash.me.musegravity.com
pre.diariomadridista.okdiario.com
bolsa.okdiario.com
cdn.arkadiumhosted.com
pre.look.okdiario.com
cdn.arkadiumhosted.com
help.turnsapp.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
*.okdiario.com
ssl368695.cloudflaressl.com
jayash.me.musegravity.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
pre.look.okdiario.com
*.okdiario.com
cdn.arkadiumhosted.com
subscriptions.digistax.com
tienda.okdiario.com
cdn.arkadiumhosted.com
billing.incthr.com
cdn.arkadiumhosted.com
ssl368696.cloudflaressl.com
ssl368696.cloudflaressl.com
cdn.arkadiumhosted.com

Certificate

The complete raw certificate details for *.okdiario.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDRLILfYPAcyy7jIglF
NjwhAFzaCVtoWhlFVtc3bNt/blglDixZyDFHHN0uJj17CM6YhNZxRIVQyXqCf+L+
OajbsGLQYOaqq+rRrB+NRhv9V9ZEadPU0mmOj/bYefXM6aZtrd7/3YRkVEyr29WA
72M1w2mbtuSrHo/oUJIv/LJy0qYDPazuUS2uLKbRdy5T9y+B2mwZ2CNeYep8nPWw
mkbjYR9NMVK+0+f7uhI7pWAephpu0sU7zwPQ0sYyW0e64NytUFJHKOqkbWPw6bAF
jIf4Ce14bVpR530zZEy8nVjTTi7B5j22uMH1/8yzhCDyJoTwD93cqcfVPSIyX7U3
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10583485836256488893644918277536100309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alcobendas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dos Mil Palabras S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.okdiario.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22817976542461272687782022525946599633898577508275621549268241364977553727941561558718397716527398994858100303366798743362944135404634077417670557226291051477188111325610332160155521895929586422868586673945925139976172442756308916046750111099111854468327565564659319161998936644463137098690729673203783399914238366056598565367102972057409717341781005993015772279082968230937646123707323226056910380609456978011632100092822986170062054775066438415566179795146148844900987203545188850361393190477618270663887581010712320208467232651841634098890431215067612809937877616308358451726443829683860277758397653075758803138499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac359b03c3d94a37c600761e7412390d03f40b68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okdiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okdiario.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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