artsfund.org
Issued by UbiquiTLS™ DV RSA Server CA
About this certificate
This digital certificate with serial number fe:13:37:0a:22:f6:70:28:36:6e:0e:2e:92:09:89:db was issued on by COMODO CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=artsfund.org
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): fe:13:37:0a:22:f6:70:28:36:6e:0e:2e:92:09:89:dbSerial Number (int): 337723680905311035159414629156656875995
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: fa:2b:9e:b0:fb:04:98:fe:43:4d:e3:0c:66:f9:5b:5d:b5:2e:a6:6a
AuthorityKeyId: 38:12:c6:79:02:66:38:02:e3:37:24:e5:8b:0f:ff:45:95:69:e6:31
Fingerprint (sha1): f3:b4:a0:77:c3:a9:98:b8:43:50:45:05:13:7c:5f:e1:9f:b3:71:06
Fingerprint (sha256): b7:34:57:be:f9:61:04:0b:51:84:7f:76:1c:28:98:9d:04:55:38:d3:20:ed:2d:c0:08:24:59:6d:7d:f2:6e:47
Issuing Certificate URL: http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCheck the revocation status for certificate artsfund.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for artsfund.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
artsfund.org
www.artsfund.org
www.artsfund.org
Other certificates including the domain name artsfund.org
(limited to 100 certificates)
artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
connect.artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
cpcontacts.artsfund.org
artsfund.org
homer.artsfund.org
poseidon.artsfund.org
connect.artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
mail.artsfund.org
connect.artsfund.org
connect.artsfund.org
www.artsfund.org
artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
poseidon.artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
connect.artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
cpcontacts.artsfund.org
artsfund.org
homer.artsfund.org
poseidon.artsfund.org
connect.artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
mail.artsfund.org
connect.artsfund.org
connect.artsfund.org
www.artsfund.org
artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
connect.artsfund.org
artsfund.org
artsfund.org
artsfund.org
artsfund.org
poseidon.artsfund.org
connect.artsfund.org
Certificate
The complete raw certificate details for artsfund.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIRAP4TNwoi9nAoNm4OLpIJidswDQYJKoZIhvcNAQELBQAw gYAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSYwJAYD VQQDDB1VYmlxdWlUTFPihKIgRFYgUlNBIFNlcnZlciBDQTAeFw0xODA1MTkwMDAw MDBaFw0xODA4MTcyMzU5NTlaMBcxFTATBgNVBAMTDGFydHNmdW5kLm9yZzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANPLm4iex4vXbIY/A3+HixYRZUSe 9ya5sagyRclwzS2FZMl+Av8P6WLRgXoGGNF3WnCRMX0oh/6Ee4BMzbx9d3O2OUhJ Z2DDrAYIV5ISBzvy4mod6KJccKMgMZZUjwKfr4OEDNwbWO+81h/CaHUXk3j9M+8o +Tg/5fifzCImJkaWM8VxQJUdVyPrQb4RCLwZDyWNl7Q4OGIWKppXFpCplSihAIJ5 JUDj6FmTEGxuZn6gV/TG66uR5ikqzHJpXu2PJbJaPXNdaOLIXYa+xxXgDAXQxtAD KtOWyjHZNxl7gFGuIOMLE9ETpYgKuD6m8FeI5wezdxuBmc1wwefuih5yEmECAwEA AaOCAnwwggJ4MB8GA1UdIwQYMBaAFDgSxnkCZjgC4zck5YsP/0WVaeYxMB0GA1Ud DgQWBBT6K56w+wSY/kNN4wxm+VtdtS6majAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUAYDVR0gBEkw RzA7BgwrBgEEAbIxAQIBAwQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUu Y29tb2RvLm5ldC9DUFMwCAYGZ4EMAQIBMHQGCCsGAQUFBwEBBGgwZjA+BggrBgEF BQcwAoYyaHR0cDovL2NydC5jb21vZG9jYS5jb20vVWJpcXVpVExTRFZSU0FTZXJ2 ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAp BgNVHREEIjAgggxhcnRzZnVuZC5vcmeCEHd3dy5hcnRzZnVuZC5vcmcwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJ eqj9ywAAAWN2Gxx3AAAEAwBHMEUCIFE1O+DaLPODeR3h+pQnjPTPWP/aF2Z95Bjk sd3t4rfHAiEA6VX0V8TL9CtdcBWk91eMDjqaC2ZdS29nz4Ke98IC51QAdgDbdK/u yynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWN2Gxy1AAAEAwBHMEUCICxE +r2b78DWVa/Uk26rdxWrKVMl/fNIMLmzLJ0dGIhEAiEA5PRcgHM6YmQ/nP3XILPI 4glaY9h71vdGzMxCwMfH0GQwDQYJKoZIhvcNAQELBQADggEBAHQE0ZW5Cm81z2VJ SnIDjw5wa8y/ASmWDoqCTFLFhGX3iv+5erF2FCXBT8CYkjLjLOAVWLZ0kd5fa5NT 7Rw9TyWs2M5i0GSYtrWA5Kar2OE0k38tD+1GugKJuLCwSU4qtyfGExKY6Qnk3yI2 0OkFqApWZalQlEniGbWllBz6dxwAT3wp8ttuaI5YqH8na4vm+5FTNruEdKCXHIfh WqHSRKqFEFQISYGy/i7b2SD3x8EYm91a1tJjGwK69MzkzS8wSDwJ5uLpr4THbmFN DRwW0TLQCRNn42kB4ZOwhIcOo9rQB2LiKwJlNPe02li/ttYLD9ZHecqz4f/djrOl Z6XpeN0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ubiJ7Hi9dshj8Df4eL FhFlRJ73JrmxqDJFyXDNLYVkyX4C/w/pYtGBegYY0XdacJExfSiH/oR7gEzNvH13 c7Y5SElnYMOsBghXkhIHO/Liah3oolxwoyAxllSPAp+vg4QM3BtY77zWH8JodReT eP0z7yj5OD/l+J/MIiYmRpYzxXFAlR1XI+tBvhEIvBkPJY2XtDg4YhYqmlcWkKmV KKEAgnklQOPoWZMQbG5mfqBX9Mbrq5HmKSrMcmle7Y8lslo9c11o4shdhr7HFeAM BdDG0AMq05bKMdk3GXuAUa4g4wsT0ROliAq4PqbwV4jnB7N3G4GZzXDB5+6KHnIS YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337723680905311035159414629156656875995 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UbiquiTLS™ DV RSA Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artsfund.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26736684974481639408252871052317595243157409714045764880407138458716297087233245806839819539446829009260084261063918668859580116927668001627870217026569877096732391186414721464454412008266479178416116656707991219844485599692355160518675998859325689408555314570669001187462929022360530814228875879898720401423591817920784858401019273378085461312796443120005528355681099440081844658544625724977582018671411812683950009421572248938522667705235418739666073081601171029662129453360816706032895451999930016098236751011729092781942528458721577122066204986245821589348880805371768397145457827551618568801579522990702656098913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3812c67902663802e33724e58b0fff459569e631 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa2b9eb0fb0498fe434de30c66f95b5db52ea66a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.net/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/UbiquiTLSDVRSAServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsfund.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsfund.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000163761b1c770000040300473045022051353be0da2cf383791de1fa94278cf4cf58ffda17667de418e4b1ddede2b7c7022100e955f457c4cbf42b5d7015a4f7578c0e3a9a0b665d4b6f67cf829ef7c202e754007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163761b1cb5000004030047304502202c44fabd9befc0d655afd4936eab7715ab295325fdf34830b9b32c9d1d188844022100e4f45c80733a62643f9cfdd720b3c8e2095a63d87bd6f746cccc42c0c7c7d064 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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