www.directumtranslations.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 08:d5:82:cb:b6:77:97:26:29:49:13:d0:56:30:c2:ac was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.directumtranslations.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d5:82:cb:b6:77:97:26:29:49:13:d0:56:30:c2:ac
Serial Number (int): 11742436050183558122232159143921238700
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:45:71:a2:54:1f:ff:15:78:ad:67:76:22:1d:23:7f:ef:4e:27:88
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 59:3b:e0:78:12:2f:15:0c:5d:d4:77:d8:27:25:27:e0:89:3c:ae:b1
Fingerprint (sha256): af:d1:86:d0:0b:b7:f8:12:c9:f6:90:a9:67:4b:4f:0a:fe:0d:ca:e8:86:04:b9:9d:35:d8:a8:7a:8c:75:3f:5d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate www.directumtranslations.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.directumtranslations.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.directumtranslations.com
directumtranslations.com

Other certificates including the domain name directumtranslations.com

(limited to 100 certificates)
indiquebodylaser.com.br
mail.softwarewagon.com
dev.directed.studio
www.bluedom.tech
directumtranslations.com
cuanto.com
cloud.geteducation.link
staging.directumtranslations.com
cloud.geteducation.link
www.directumtranslations.com
mail.softwarewagon.com
www.vennsmith.com
directumtranslations.com
www.directumtranslations.com
www.directumtranslations.com
www.gettrove.app
directumtranslations.com
www.directumtranslations.com
mcleod.stage.parade.ai
www.shandellejensen.com
directumtranslations.com
agent.shippyexpress.com
directumtranslations.com
www.harryxie.dev
app.directumtranslations.com
directumtranslations.com
www.directumtranslations.com
www.gettrove.app

Certificate

The complete raw certificate details for www.directumtranslations.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11742436050183558122232159143921238700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.directumtranslations.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873232131059528343244961569973170603702372123843937382094064443173247796078322187643312046222090104466281850058678689184177914959110283217106904105791915799494709547057031379044279676754377484440792836649805979631969516108643038447738105893463707338200737608405710482940047433352196414558579703841597821093930557352755266358603907281775555426723721287325534403582588570765093889306375563612013572014987846088174095560953564606461783019399886007586207307526215732042757586648639168946205859825630076676674976391305432586371827570755350613687237503107035501793665521203464244069863293044292984889455592573967058790518151460525329062597756367159871155305409478725304443004352506813766307921665412912918647218693058551833237925169878737539132646347879119258872474453914102027587692299646493491978340086382658290863934605459488709920098712436487254783108921015158255189803723324971433085387964346461862545817232573628106618011139795306177031548500370674072754157268679978384618762688707973532248752819006178288776267762459883829575616036254587496088932379230919984539808667880771751165484461305892377770962900263283014241776719812208604294265794079137636761538690005197067516211508113233493464386452436053798106241466640261461521345263177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d4571a2541fff1578ad6776221d237fef4e2788
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directumtranslations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directumtranslations.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ef72669110000040300473045022100e43a213d13e7645ce42286b9afd0635a17c0711a0be33d91961932c8d11ade06022059b5831b127ecb0c493a20583f7c5d1de73165a718ca884e05120b21c4a08dd50075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016ef72668c2000004030046304402202d6af02f3ffc198f26eab1bb6e8aa6184b1dc79500d133cb5798b70bbc8691ce022031c295e697d2d4147cfcd0635d7938f5271c2d32dae399525c57cdd860f17f23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f4c229590ea8d5be68a1f9c2ea1f5ed70d84101813ad37fb358ccc595221fd0738e3c4f3a05562a8bf1bd312f5359e4f03bed436de41e851f78a40aa2850611faa07aab6336c287a139f912b4f8b0f07d1d62ef2dec16697d720c66cbf8c04aeaa2a6f4663b0d4e62dc8f07c1ce637f90318552041df8b46e39822be4843c2f72793fc0472538126056f3fe4bf77de922bdf6b73aa7246c51b5ac6effa270d96cbf5a67fcc15510268b851354b38b15851a9fdb99e60210d0a2795220259192006700fac3a7cf6d07ac971980efda45379521eceaca01487653d6f7c73ffb5de4129ec861c5ebc62f22919f4201f68e81a75816e76609b4eb042607542bc085