wind.leader-associates.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 0a:7a:7f:cc:f1:fc:17:c1:26:93:4c:98:13:70:df:5c was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wind.leader-associates.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:7a:7f:cc:f1:fc:17:c1:26:93:4c:98:13:70:df:5c
Serial Number (int): 13928332278045873222704911492391690076
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:9a:0c:f7:79:90:ad:0c:12:49:61:66:51:72:0e:fd:84:bb:65:ea
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 4f:c6:5e:98:42:7d:f8:a1:7f:48:85:20:76:ff:b3:58:74:33:04:ad
Fingerprint (sha256): b0:2a:09:d8:c6:18:34:7a:af:a9:e1:b0:44:3c:ec:be:76:d8:51:6d:c7:4d:82:c5:a6:0d:e0:54:96:07:c4:06

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate wind.leader-associates.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wind.leader-associates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wind.leader-associates.com
www.wind.leader-associates.com

Other certificates including the domain name leader-associates.com

(limited to 100 certificates)
wind.leader-associates.com
wind.leader-associates.com
subscriptions.leadzpipe.com
events.meetingoftheminds.org
wind.leader-associates.com
events.rentyuhride.com
leader-associates.com
plans.nulou.net
wind.leader-associates.com
survey.biopetlabs.com
events.meetingoftheminds.org
wind.leader-associates.com
wind.leader-associates.com
leader-associates.com
event.leader-associates.com
wind.leader-associates.com
subscriptions.leadzpipe.com
leader-associates.com
billing.leantechinstitute.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
leader-associates.com
subscriptions.leadzpipe.com
customer.yesnovo.com
registration.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
subscriptions.jemsu.com
wind.leader-associates.com
wind.leader-associates.com
forms.r-recommends.com
secure.leader-associates.com
leader-associates.com
events.meetingoftheminds.org
forms.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
www.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
billing.notifium.com
subscriptions.jemsu.com
subscriptions.jmango360.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
leader-associates.com
events.appsify.in
daftar.abcpalem.com
accounts.etd.me
leader-associates.com
wind.leader-associates.com
leader-associates.com
billing.datastrive.com
inscriptions.clubdebienetre.com
payments.dominiquefraser.com
inscriptions.clubdebienetre.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
subscriptions.jmango360.com
inscriptions.clubdebienetre.com
wind.leader-associates.com
wind.leader-associates.com
inscriptions.clubdebienetre.com
leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
wind.leader-associates.com
leader-associates.com
subscriptions.mendability.com

Certificate

The complete raw certificate details for wind.leader-associates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndHkrQJdXs5dUdOGBDkW
cAYwSfCLnz9lqw8H0ACyRUZjr00Au3dIQ8P9xwe/DPPU+g1E8eF5/XSBWEciQLZ9
jYzN2wuj3/aHnS/7lGBALw3smEypoAaZjKtqJOUro43kBtfKZkQ4oAHzjbcpQ2gR
M/YMRel2NFXsKzDlE/siAfzHCsJ5s4eec/Nnw6fu0sKgDpQrgU+T4xGYi9mITEJ6
2eBsWwQgNn3SEi8B+0TEf+MVvBEJUFDZZuycPS91oKTBg/elBP+PUlMtm0V1n0Yn
JFl9PIjfeKUsCuOBgiR0GZg+/zMuOxonOih9nDgLrYgNedx4BuAPHmNgjMo+JXQi
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13928332278045873222704911492391690076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wind.leader-associates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19922916106179852863506543574626454285996541640581253773675302929810363251423282283928708585112089890534646570908700347111403470271544103578453664406049586563492075278931348097923251362083115949680591182214600448059864911420279673018144425212584826455851327567755585437888983360610430464309421559414977827656978480519220252800546503226568289538870680250569033263181501892850845311177535605264711728843593562496236673059420260508430691192111317945784908513762919132827061257208171964550321913590225472227786536579134264754788074020331849869996307450275413294168476135730565323304536316691590890300485576716242585395809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b79a0cf77990ad0c1249616651720efd84bb65ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wind.leader-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wind.leader-associates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fc759fc24000004030046304402206311be0c9b748c7f806f3fa432cebdf452be144a38b1e0d4ce4f14ee22fceba502206d474162bc78a16825db4f43bbb5cbc8d22e61e700ba24926972089fab4038860076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fc759fc110000040300473045022066ed79b4f8fe352841e9bef310b35eab1417d718a5be93edc171bc246997dce8022100b53bb0c1054862dc1a6f53ce7176fce2ac3e982aaf5c200d011cb846075869d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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