api.flutracking.net
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 19:30:88:3d:b0:3e:e4:41:9c:0c:a8:25:4f:5a:59:b0 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api.flutracking.net
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 19:30:88:3d:b0:3e:e4:41:9c:0c:a8:25:4f:5a:59:b0Serial Number (int): 33482693439001971585280735785625737648
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 8c:c9:ca:22:64:40:fc:52:a6:9f:a6:1a:f5:8d:70:b1:3d:f5:9c:43
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 54:6a:82:46:b5:76:5d:6d:4d:76:b4:1e:b2:f4:da:65:aa:d8:33:fb
Fingerprint (sha256): c2:80:2d:5f:29:2a:6e:45:17:f1:ac:4f:0f:97:ff:f3:98:0f:9e:7b:57:7c:70:09:5e:be:ee:17:54:36:6e:d7
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate api.flutracking.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.flutracking.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.flutracking.net
www.api.flutracking.net
www.api.flutracking.net
Other certificates including the domain name flutracking.net
(limited to 100 certificates)
iwops.flutracking.net
iwops.flutracking.net
www.flutracking.net
info.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
info.flutracking.net
www.flutracking.net
iwops.flutracking.net
www.flutracking.net
iwops.flutracking.net
iwops.flutracking.net
info.flutracking.net
api.flutracking.net
info.flutracking.net
www.flutracking.net
www.flutracking.net
iwops.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
iwops.flutracking.net
www.flutracking.net
info.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
info.flutracking.net
www.flutracking.net
iwops.flutracking.net
www.flutracking.net
iwops.flutracking.net
iwops.flutracking.net
info.flutracking.net
api.flutracking.net
info.flutracking.net
www.flutracking.net
www.flutracking.net
iwops.flutracking.net
www.flutracking.net
www.flutracking.net
www.flutracking.net
Certificate
The complete raw certificate details for api.flutracking.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIQGTCIPbA+5EGcDKglT1pZsDANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIzMTAxNzAwMDAwMFoXDTI0MDcwNzIzNTk1OVowHjEcMBoGA1UEAxMTYXBp LmZsdXRyYWNraW5nLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKYCBEWVTDsAtGGutodvipmedPw4kb9aSsgBTsGoHe7XzvLD4naAnlYBauMFO3jl paOamqBIbcQuLm8Yg7I4RH/BHasFmmN5yhW29opXT95dadmqlxsfC0caZKY0Guuq 3gPHovvCfrcrXMX4cxjJJ3OE0m15vncPuEbhDI4OY4ndmM2qnW4wpYURMqRy75T8 DqU9WU0IZFjMPkx+L5dd8yBca42uWIIDdYB/cWINZi8NaZBTzzwsM39RuK/LlUv0 wVYqPUfT3fspxKDY+9Sqjc9yotHOYps+ce7I5tJWjA5727VpV51HWRYyYycioeL7 Gke53zd0sXLZK+S5Tzc4WIcCAwEAAaOCAwwwggMIMB8GA1UdIwQYMBaAFI2MXsRU rYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBSMycoiZED8Uqafphr1jXCxPfWcQzAO BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUF BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUF BwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0 aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEF BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wNwYDVR0RBDAwLoITYXBpLmZs dXRyYWNraW5nLm5ldIIXd3d3LmFwaS5mbHV0cmFja2luZy5uZXQwggF8BgorBgEE AdZ5AgQCBIIBbASCAWgBZgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM Wjp0AAABizxADykAAAQDAEYwRAIgVd3YOhyx1wRNff1e3mT21Wsv36y1UJ6rPSJA YD0KP0oCICY5KhkUJsmfxb1QerXVxuIT3HNs5tsTSHz606cqS2CaAHUA2ra/az+1 tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLPEAPgAAABAMARjBEAiALB92e WnJF7vfHYMR7pB0uvQvxA+dHVcFJCdm/+Qw4rgIgekKZ8/6JBnjTFpsk+aVSnJEa bBnMyQ8gC7vpBLKNTCIAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAYs8QA9WAAAEAwBHMEUCIF3R4JAtqcnfUII/ejhLeU/nr3ThRIincnuuTgZr Ob8YAiEAxUj6e5kY95P1cqLFmqYaf/kK3bZ6mWlpkVWVGwHghNgwDQYJKoZIhvcN AQELBQADggEBAL0GjgWqtzk34PKqPZM/Rqc0RIL/z3C5Mz1pUy/iUB9H+cQxWb03 qRQ0qGtzQ9z0LDAQz04IIVKd2wP+idU2Rzsla7Qvp5ed+ut2qPxUI+0KX7nro7YZ Li51BKliZdMdqo+Zwgic1nAVeeXJpTjJ/mNpi4aqjwryRNGnfS+QT55OyB3MrABK /DSlpPO7ak20QiAZ+a2iMAucAlh7Qd6kT8TgDgqgQvbFVMDevCjEKVnMgUk/9e8n 4c3KBVGkQpx5rGB1BoPRwdteV9bfQQnLID1BHEPcDfBJ5EapR0+psjXGPq4aMuEv VLGSv2OPHTQo5rHTgWP7KdT7fSIKIjjyb+w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgIERZVMOwC0Ya62h2+K mZ50/DiRv1pKyAFOwagd7tfO8sPidoCeVgFq4wU7eOWlo5qaoEhtxC4ubxiDsjhE f8EdqwWaY3nKFbb2ildP3l1p2aqXGx8LRxpkpjQa66reA8ei+8J+tytcxfhzGMkn c4TSbXm+dw+4RuEMjg5jid2YzaqdbjClhREypHLvlPwOpT1ZTQhkWMw+TH4vl13z IFxrja5YggN1gH9xYg1mLw1pkFPPPCwzf1G4r8uVS/TBVio9R9Pd+ynEoNj71KqN z3Ki0c5imz5x7sjm0laMDnvbtWlXnUdZFjJjJyKh4vsaR7nfN3Sxctkr5LlPNzhY hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33482693439001971585280735785625737648 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.flutracking.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20956553089668992341385429016719938235870331265034557663250314338501016325395395961040173603187428776084059078469456433937029456893102069615014274050539646089706219335287000301950050653054580642547715324359763177537522224628824366819741753355006386886954527646270189618879752421594125414354373959065970611467507423055018464919278802060453231179351781252491942125969139613144648088867023265948965477796175225243963623175243279875880156893962834080311456765341111815817541595230398931110925877545400455129106439260648070483681130488911923669035840389796554042116853989111709226566194982585178986305047983643123554736263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8cc9ca226440fc52a69fa61af58d70b13df59c43 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.flutracking.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.flutracking.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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