nandiszabo.com

Issued by UbiquiTLS™ DV RSA Server CA

About this certificate

This digital certificate with serial number e9:70:78:aa:6d:e6:2c:85:b9:4e:a7:4d:5f:07:27:0e was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nandiszabo.com

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e9:70:78:aa:6d:e6:2c:85:b9:4e:a7:4d:5f:07:27:0e
Serial Number (int): 310294107657993493966303704371710863118
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1e:33:49:8e:ee:74:7e:35:39:36:e6:0d:59:88:dd:2a:41:d6:58:3f
AuthorityKeyId: 38:12:c6:79:02:66:38:02:e3:37:24:e5:8b:0f:ff:45:95:69:e6:31

Fingerprint (sha1): 0e:a6:a2:7c:6c:af:41:2a:aa:c5:45:7a:9b:86:d3:5f:ef:59:77:4c
Fingerprint (sha256): b5:82:b1:92:06:a3:10:e4:a3:45:43:d1:b6:19:11:5d:0a:3e:16:bc:84:25:bd:f5:f5:0e:b7:d4:69:fc:b9:5d

Issuing Certificate URL: http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com

Check the revocation status for certificate nandiszabo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nandiszabo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nandiszabo.com
www.nandiszabo.com

Other certificates including the domain name nandiszabo.com

(limited to 100 certificates)
nandiszabo.com
www.sierracancersupportgroup.nandiszabo.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
mail.theartoflivinganddying.com
nandiszabo.com
www.theartoflivinganddying.com
cpcontacts.sierracancersupportgroup.com
sierracancersupportgroup.com
cpcontacts.sierracancersupportgroup.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
sierracancersupportgroup.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com
nandiszabo.com
www.sierracreativecounseling.com
nandiszabo.com
sierracreativecounseling.com
nandiszabo.com
sierracancersupportgroup.com
nandiszabo.com
nandiszabo.com

Certificate

The complete raw certificate details for nandiszabo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUKwhi4sxpnCrXLQ8QNS
TsAXPB/yekCKuslbMCAiu06NjRGQaQRT3KACZ9UmAyvVDaQyjTSG3rSnkm+EIW2l
hOlfGf8YjhNLswho6/6+EVNfwG0GMzZjNdQSR66VOF6FFZjYANxMiqSZpGS9fMvg
BBoOe1R8hmxDB29bGOiT5pyDiVUi6tUzMc70TRDVMyEuCaM7oSZJjzoSluK92x3E
0qGHLW3rWNXg3t3kfpa+WnUtg+N/eLoDSjfnLLfwAjfNSHLbKbpjnY8gMPLEPZHl
01de6pgY394x9wNqlC0kgyyQxDfNVUmJx5HLb+J5Meq8e3KqYABxDvaqV12Psb9p
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310294107657993493966303704371710863118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UbiquiTLS™ DV RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nandiszabo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25406785139687601001754960181136565470227831297485863176791761570900139530463534363758184619867034348822203156893817236966083465814552068287494041831206620688720068571267454717419508693490664929965900465638511857345476626803179619726022787290488866807160175524211682752662293830599287410314070188594751318983661155427825548353908284223977060929033713290563985037113006317289456687746757285990957863511246363348559280058390344959721200444862404083591349018694904836953008829779979844990306877883465508949653994560704857335009370516200716230098629463268427279043887958906564335147841330206768962737716523381068690057657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3812c67902663802e33724e58b0fff459569e631
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e33498eee747e353936e60d5988dd2a41d6583f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.net/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandiszabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nandiszabo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015dc31ab1ca0000040300473045022100c763ab37982f6b2f00eb38a0d212565ee691ca22b3d0e1ed125a9e1f6c75fcb7022052dd1850f2740a297150b5b12dc20a356561fcecbfc40d69f1f5df52bc2374230077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015dc31aafa50000040300483046022100b35d2732ad3d36c8a587e556b0fb660013ca9289dc90a4c9ab78aa0dbdc2a24f0221008e5080c91a78fd29dc83b631b18d5170bad97e7f37ff0ed5f64ff426f6cbb3c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004949ad2711899f31b34e5bcb6b20259823f88f0c82fec3b12c1c6bc2367ef9ece45587ef379de74c470bfda856b6df746f8b9d70bf14d8d6bbda67cb4adff50ec7967ad7664e9c246ad36944c45eed0627788360279d0eb77e81afc97791cb59145248d10aabe2f2a2e534910de97e539a03da2cc84fdfb907fa2e1710be2425d3dc301c321efbd58b761d6ecdfc77b1f6735c616516b83a17bcd568e3b5032fce8a66a1da0ca2eb55bd4259551928fb3f8cbdd0a28af4ca29db448a4002f3f6bcfaa81e0e1defedebb6f27247df2f4054e2518fb2c1fa9cbea5269a024309a5afbc0a2baec02877f7c40378e72102eff282fe17440bc39c2c5c0b900b32f3ef