*.skyhi.ge

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 54:ff:28:ef:00:23:b0:8a:c3:93:92:2e:1d:02:60:e2 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.skyhi.ge

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 54:ff:28:ef:00:23:b0:8a:c3:93:92:2e:1d:02:60:e2
Serial Number (int): 112980017576817447445119660010871349474
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f0:71:15:8a:12:05:59:1f:68:d4:80:3f:4d:fb:56:9f:ae:65:9a:3e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): e5:5d:75:de:2e:1e:c5:86:37:42:13:0c:9b:19:fa:64:bd:4a:a5:91
Fingerprint (sha256): c1:92:19:47:f5:b9:62:3e:5b:ee:ae:30:3d:15:09:9a:97:3a:2b:c6:51:b8:a5:6d:e3:18:e1:33:8b:c8:30:81

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.skyhi.ge

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.skyhi.ge

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.skyhi.ge
skyhi.ge

Other certificates including the domain name skyhi.ge

(limited to 100 certificates)
billing.skyhi.ge
books.marketingmedia.ca
skyhi.ge
accounting.whitehutkw.com
payments.labspot.com
accounting.whitehutkw.com
get.forfit.in
books.shriganesheng.com
accounting.whitehutkw.com
books.mokalabs.com
books.colorvibe.net
books.samveda.care
accounting.whitehutkw.com
*.skyhi.ge
accounting.whitehutkw.com
billing.hostmentor.com
books.yppmail.in
accounting.whitehutkw.com
skyhi.ge
books.clavetravel.us
docs.skyhi.ge
skyhi.ge
books.proximanetworks.com
skyhi.ge
skyhi.ge
accounting.whitehutkw.com
accounting.whitehutkw.com
skyhi.ge
books.rkleather.co.in
*.skyhi.ge
accounting.whitehutkw.com
books.tripshaala.com
accounting.whitehutkw.com
accounts.shamiyacatering.com
myaccount.vchc.biz

Certificate

The complete raw certificate details for *.skyhi.ge in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgIQVP8o7wAjsIrDk5IuHQJg4jANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIyMDkyODAwMDAwMFoXDTIzMDkyODIzNTk1OVowFTETMBEGA1UEAwwKKi5z
a3loaS5nZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ390xK0kQm5
324dB2mQ8xNIk4SJjFmFaO90jviQeOCf7FprOQt6EtXjk22PxPGz1Cg5XRzlpbEd
nbsXOia6lABjBJmQ6hq5w+xUpQRkltbiZJZ5JXcYvz6T7fJ7IIQn1DxpbR8jDPx3
awsKxP0dQCk4jRDB48xHYCmqu5zrYT8sTvo7Voi/l00zlmsaSc3chBMP00lGNuN2
vbo3P8/xOb6ndUHGcgNUBmBji37HlrFperszbWWU12Z6kSoa7raorHCbzmIlKDYp
Cj6iOCUIGu4/O66VBDIPzKh9K9BziIvTyUvQ00/Y0Rbha4hWImuwM7RjANtfGDMa
NpQlfY4Pc40CAwEAAaOCAvYwggLyMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF
4bgBjWHhMB0GA1UdDgQWBBTwcRWKEgVZH2jUgD9N+1afrmWaPjAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRw
czovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBP
BggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9t
YWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3Auc2VjdGlnby5jb20wHwYDVR0RBBgwFoIKKi5za3loaS5nZYIIc2t5
aGkuZ2UwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+
GGq0Zyldz7EMJMqFhjTr3IKKAAABg4LfpGUAAAQDAEcwRQIgLPR3G8yl2UWY71xx
Tkm4RFniMJ/eSwh9+z/BAHixsdACIQDgLtgVsKAqLL0ne64PdvrzcJhOuRqMfEEE
4G2rHFYW1wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABg4Lf
pIAAAAQDAEcwRQIgWxIPYPjGEgsw5keAGaGWKRHZY+U2YeAKfNGVVjQyawACIQCa
oRIR1NqSp1nYsZOvzWOvJPHMOBTN5LyTFKLQjs82sQB2AOg+0No+9QY1MudXKLyJ
a8kD08vREWvs62nhd31tBr1uAAABg4LfpEcAAAQDAEcwRQIhAO2z9HtwbFcPSyqL
Y02wwd0xuFlALD/jzVrMhhH0IZzLAiBZ4YxBIjX5ASMx1Tgsh6Y3VwoRQFxLKbuP
GigqHRoBiDANBgkqhkiG9w0BAQsFAAOCAQEAgDMccS/7uM3gGI/xFBNdGaGGxSqE
KC2mjsMh4zEcQHhn5TCaGuXB009kuNDwctVCpKdvOoVEkjjcl3yuF/WOarOoyQ1I
pp3rJk1YMmRlmPiYB373DbZ+bxfpcxPQukQH/vnXDgzv8SOGs6vvHF7TbLEit5jQ
xONVjQU0OnbYntdWsU2vYtKAJbO5YGzUDHjQzoGUBthHqVJMIVMt367sGqUTcVxS
fx/WaywUJ4EmCwMPBxHYDUAlC/Aa0HOWE+bgRAzU6jzjB9fv/4BXmgUSp9Gwouep
6z5TMOBxdxNx4DZT+rnT9kXHbl8Wvt1B4RrR6YRhtZU87NUOVy7QspCfpw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3TErSRCbnfbh0HaZDz
E0iThImMWYVo73SO+JB44J/sWms5C3oS1eOTbY/E8bPUKDldHOWlsR2duxc6JrqU
AGMEmZDqGrnD7FSlBGSW1uJklnkldxi/PpPt8nsghCfUPGltHyMM/HdrCwrE/R1A
KTiNEMHjzEdgKaq7nOthPyxO+jtWiL+XTTOWaxpJzdyEEw/TSUY243a9ujc/z/E5
vqd1QcZyA1QGYGOLfseWsWl6uzNtZZTXZnqRKhrutqiscJvOYiUoNikKPqI4JQga
7j87rpUEMg/MqH0r0HOIi9PJS9DTT9jRFuFriFYia7AztGMA218YMxo2lCV9jg9z
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112980017576817447445119660010871349474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.skyhi.ge'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19944579407660942519682899796907466892994808055847188545862395606031562523613853175916931109431890947093856130502718624564218761638320560286675096341490712947144689372585150436605693242804853744106323120834465288557346945678013097841040724056361632170014883194428998591135581894883323749299579402991023128173725021750364648897066820207010641459059555025084963946599607194109642030154503272703309344275960537361762355900490034841201255087133692078096987816979167414560722214428083666647371120629125815073221213138851098031673690934354203042904907541531189611167029750196048307587623792560134619539656221947705615676301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f071158a1205591f68d4803f4dfb569fae659a3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skyhi.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyhi.ge'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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