covenanthousetorontoevents.ca

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f6:8c:89:43:22:5e:58:ba:d7:66:d6:2d:47:86:c9:7b was issued on by Sectigo Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=covenanthousetorontoevents.ca

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f6:8c:89:43:22:5e:58:ba:d7:66:d6:2d:47:86:c9:7b
Serial Number (int): 327719792532323317712725232229487659387
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 97:eb:30:d4:c8:eb:8f:26:4f:ff:69:46:1c:ff:5c:0a:30:ab:6a:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): fb:e3:cf:84:b1:fe:7d:6e:89:e2:b3:f3:58:bb:f3:c5:0e:03:40:19
Fingerprint (sha256): c2:56:97:7e:21:5f:89:1c:ac:91:a2:a0:7a:97:a6:d1:45:0a:15:36:4c:e3:4f:32:65:a5:ed:fc:d2:db:f9:3c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate covenanthousetorontoevents.ca

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covenanthousetorontoevents.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

covenanthousetorontoevents.ca
advanceconcordia.ca
akaraisin.com
crowdfunding.mcgill.ca
donate.humanitariancoalition.ca
donate.oakvillehospitalfoundation.com
donate.ottawafoodbank.ca
donateoakvillehospital.com
fundraisefornygh.ca
give.orbis.org
m.supportthepmcf.ca
qa.raisin.events
raisehope.ca
secured.hope-international.com
supportmackenziehealth.ca
supportthepmcf.ca

Other certificates including the domain name covenanthousetorontoevents.ca

(limited to 100 certificates)
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com

covenanthousetorontoevents.ca

covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com

Certificate

The complete raw certificate details for covenanthousetorontoevents.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtppmIivv63keVPporf66
HnHB67LKLLaDt5EJrp8OC3OiaFzpouHnqjYLpPLLmhfA0uEUGEc8oL7ACWxKw8Of
Hh8doNMgdKawZxFpiNrqaAunlAqDNDeA3cMjFwycIYxWHxQSJ40CT69e1rUkVTXi
ma377WF1f62jR6aQotWg06Qw9xpXpDDN42jvnzJcVKIpH4XbHvvBE8EfC57sn8Ao
iPs2cfxmPYahvALKIalzKJ2t/PaYmq4917RPLXwOcmABBvh4Ko4unlLiWyPUhpi3
75WbJ63a3e9R8LG35/pdVXj1iMJQqMqW9jJRj6OaZSj27UM0EeSGoA0p5c0KK7zc
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327719792532323317712725232229487659387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covenanthousetorontoevents.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051508468128501760205140336111892565828501383844638708892380235511002640525186778606097892053669106199893697436100743289862828574048665375000074969118577241303761527967972016276656550001222424608906564696232373885413873555504261582433494873310111420862423101608857443570931913436903032267616118020406102988003533610215607220036023487345024265518473660632639321605593260583669593977309537455413777833997640467059888746576833693377883798540259995236347203500091363374977577748394252791934383077901459066856618076858893678165098086450433628200945796429887421434076341618241884140343408326682087166630189376500899044473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97eb30d4c8eb8f264fff69461cff5c0a30ab6a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018385742d6d0000040300463044022028c952c180f7b7dae9161411fdb9c7a6cb0a0a6bb435a468c19b596715d1ad7302200a38798c2f5eedb2a4070bd550b3ac7f14b9a3e99349e75ee7993393e5a92f1b00770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000018385742d5b0000040300483046022100f5053a10fa3754bf9401c00a139b0eb0916c57543f3ca4724e3477be0530c1b102210082c9abfc79b6689169f9a623af58706bbb9df02c7a6b7fea252fc3763dcc34fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceconcordia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaraisin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.mcgill.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanitariancoalition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oakvillehospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ottawafoodbank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateoakvillehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraisefornygh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.raisin.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisehope.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.hope-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmackenziehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportthepmcf.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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