*.monoqi.com

- Things I Like GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:45:81:9a:2f:78:61:0b:c4:9d:5e:0f:d8:8b:2b:93 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Things I Like GmbH

Organization: Things I Like GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:45:81:9a:2f:78:61:0b:c4:9d:5e:0f:d8:8b:2b:93
Serial Number (int): 20299317066679864308705969074453818259
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:75:f2:f7:b4:25:e3:15:88:8b:1e:61:13:0f:49:45:c0:61:f9:0b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f9:9b:9f:4a:e2:7d:b4:8b:c3:8b:d8:45:a9:53:20:e8:23:8f:77:73
Fingerprint (sha256): bf:03:b6:34:4f:00:54:ca:a6:77:31:9e:c9:93:8c:12:26:d3:d1:2e:cb:aa:66:a8:12:f2:ae:5a:01:7b:1b:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate *.monoqi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.monoqi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.monoqi.com
monoqi.com

Other certificates including the domain name monoqi.com

(limited to 100 certificates)
*.monoqi.com
monoqi.com
mei.monoqi.de
mei.monoqi.de
nl.monoqi.com
monoqi.com
kibana.monoqi.com
meistaging.monoqi.com
mei.monoqi.de
meistaging.monoqi.com
monoqi.com
monoqi.com
press.monoqi.com
monoqi.com
monoqi.de
monoqi.com
www.monoqi.com
mapi-dev-mathias.monoqi.com
mei.monoqi.de
staging.monoqi.com
designerfocus.monoqi.com
testio.monoqi.com
*.monoqi.com
testio.monoqi.com
mapi-testio.monoqi.com
www.monoqi.com
nl.monoqi.com
*.monoqi.com
press.monoqi.com
staging.monoqi.com
mei.monoqi.de
www.monoqi.com
testio.monoqi.com
monoqi.com
mapi-staging.monoqi.com
mei.monoqi.de
staging.monoqi.com
testio.monoqi.com
testio.monoqi.com
monoqi.com
monoqi.com
www.monoqi.com
testio.monoqi.com
www.monoqi.com
monoqi.ch
monoqi.com
testio.monoqi.com
staging.monoqi.com
staging.monoqi.com
mei.monoqi.de
staging.monoqi.com
tr.monoqi.com
monoqi.com
mapi-staging.monoqi.com
support.monoqi.com
lp.monoqi.com
mapi-staging.monoqi.com
monoqi.com
cdn.monoqi.com
lp.monoqi.com
*.monoqi.com
mei.monoqi.de
monoqi.com
mei.monoqi.de
monoqi.com
mapi-php7.monoqi.com
*.monoqi.com
press.monoqi.com
www.monoqi.com
testio.monoqi.com
kibana.monoqi.com
testio.monoqi.com
monoqi.com
www.monoqi.com
press.monoqi.com
testio.monoqi.com
*.monoqi.com
staging.monoqi.com
monoqi.de
www.monoqi.com
nexus.monoqi.com
mei.monoqi.de
staging.monoqi.com
*.monoqi.com
mei.monoqi.de

Certificate

The complete raw certificate details for *.monoqi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA33ENIXSnhixvtVsXLgSJ
z4VFwkvmYWQeAgGN3di7CY2pVn7T9+IjsC8nA9csKtXFtBgsJ6F6MxCGqAlYrfIi
kyMShKesrIfb4//y07UQy8cgF2TwY25qNiuAz/2bmXYD31GnWxFhsWXMpRoRYaMU
FFGyj04Do+L+X8JQlhwRsGC2NL1q2sGs5WfSJgZPw56KP2ZjWUptEOr4b4xS44qZ
nwhX4ynyH3jaPUZk886xn4xQ3DeDffR1wrK6EIgnxYddDsay1Z+DWvyOdm1t8XuI
Ma4+EYjNDavLelUa+AHKv0P9va66diNAiqHSUOAf9L2e2qKJb8JRkuS0Zjn1bWir
U0GfWyk2pPFJpvEMEOa3TFHZ/fuDwAF1gfwY2PzHwK8Tj5Vhbwt/JLq81sMMG4ll
ey5wgQosHZZKkBqoEBxf9gfHa1TpnjLxNkjeq4S1b5AVLLjrjktvv2rESAGKa4Dx
qN9FkXUqZyZMRmwgTM9LB5R8CoMmmixhVEZ+vQXoGDUqV4/P1Z3CRP5rU2geLzWe
uwd1Q7ZzjUpRPh4970olXHRqUhLYN/jO0VxF6dF2NA3oKxU/M3C5nE1GTUMQ87yF
4SpUkElNx1be8nQXCO3me0eufx5wnAR0U3yAUcb4y4RCxrqUGT1c9QvdHg9sawRn
S/GBxKEKxJ3MP9MIuLSW400CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20299317066679864308705969074453818259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Things I Like GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.monoqi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911562224948730846341810329975648377193439819241674733240214251085307858629022355783722196323273546701249661278371615965729457266119417103428193575392221144930006852194949454918908588703320862440399014770357789248890914177149614507546503182049601683647821831335113132747753201481030987293523808244147173995025176772477582600306618744355615771837994295129244963628077264987343719418738344728173757822408897005878177306481484290536827370471965580246443506281327849045474982040174045413034975106880411735269633712081646390747198509354676103037750554282336822289038815852261510228838803630789753490933239374741633220187170675251754186797801972910769175821218582774887674867135786979675167426097142027087071184610727271494031416250676717869783358880851527448364557815320928983045466242918544871338025252772281249668527838358327039192015934253507232583469479888821133558428271902755166413171400005847104571106191570043062312983761423242539692428132032149814805753071477492449634590666137347639824020982302962680232564715755673243077230277183466771590331199332129811497686272339306088493420348765664213202231939196402844309909878018773693949903997194642486608651586512269445527866206527775478519804638591112003808033236424426217803296990029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5475f2f7b425e315888b1e61130f4945c061f90b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monoqi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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