ccnp.ca

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0b:fc:28:0a:22:f8:da:eb:a5:1c:fc:f5:19:cd:02:5f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ccnp.ca

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:fc:28:0a:22:f8:da:eb:a5:1c:fc:f5:19:cd:02:5f
Serial Number (int): 15930778861473960133757842285145162335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:70:84:cd:18:7c:3a:71:f3:cb:6c:ec:ed:f5:fe:85:3c:c1:48:00
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 85:de:65:90:a9:db:fb:27:7c:b1:de:88:99:a9:cf:98:23:f3:52:24
Fingerprint (sha256): b4:a4:5c:a5:2f:01:bc:cb:ef:44:d5:1a:54:7c:a2:85:80:18:ef:50:e5:84:67:14:2d:2e:e3:db:d8:38:fa:5a

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate ccnp.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ccnp.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ccnp.ca
www.ccnp.ca

Other certificates including the domain name ccnp.ca

(limited to 100 certificates)
ccnp.ca
www.ccnp.ca
www.ccnp.ca
ccnp.ca
ccnp.ca
ccnp.ca
ccnp.ca
ccnp.ca
ccnp.ca
www.ccnp.ca
ccnp.ca
ccnp.ca
ccnp.ca
www.ccnp.ca
ccnp.ca
ccnp.ca
www.ccnp.ca

Certificate

The complete raw certificate details for ccnp.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15930778861473960133757842285145162335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccnp.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728015898508316576269815947840269112594825234267014939487529886848375541761884628106237229690169074197719929964126223261398372641617756383561409561574071697062484263775773176035446724891896066916276693857521957129895062651055775875093637017078364479814891194160744084516259310468813148396531947140236537190053825463019941270511055292564237821247563068880343385606569151394424544486190264402577717851625240726291111756131974238861262307009340705169102366519219297726672750631774333671089403122960013226978448653205592266930813438027215594913577050335040481642767484021873835315935850449444800785885024745424089888802112924553799648952634746085697086167330329951244141746529346341183645936712035844675242900966285649277766865305448886600877483480353935951720750242592917178028358162106522362305050079442256983863292340980550117150550015491670983756471595465165266600877014442389017392434262331889390542110195703478377375629171839962850667955955396875288043339399845503137131235298060828713360788027486368665378637791524791353920481476251489993424098912653288761388853554993947040606676015547542569380907360862346248238802937134708087515576307234658165334967817532396168340682543284627959239910654418056605828096593049977890445894879809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a67084cd187c3a71f3cb6cecedf5fe853cc14800
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccnp.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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