www.ukishiro.net

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:06:d5:b6:c6:dc:21:c2:ff:1c:b5:92:c6:8f:6f:65 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ukishiro.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:06:d5:b6:c6:dc:21:c2:ff:1c:b5:92:c6:8f:6f:65
Serial Number (int): 13327768373315678156805590815209385829
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:a2:39:ef:77:32:a9:8a:e6:b0:e8:ce:7b:3f:22:4a:b7:f3:a1:fd
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 2d:6e:30:d1:b3:0e:ad:47:07:86:c6:8e:69:63:7c:c4:d8:34:9f:13
Fingerprint (sha256): c2:9b:0b:97:78:0f:8f:13:dd:67:53:fe:50:2f:81:bc:ae:03:f4:80:4d:7e:d3:2d:6e:71:b6:11:b6:35:94:01

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.ukishiro.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ukishiro.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ukishiro.net
ukishiro.net

Other certificates including the domain name ukishiro.net

(limited to 100 certificates)
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net
www.ukishiro.net

Certificate

The complete raw certificate details for www.ukishiro.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv3G1nWVMQpYDl50E9mu5
dWFPqD6Peoz/dGIGbaeCdJpGzuMgddAKH+tVmRwWIOCKjlruaTyFJ6PgXwzxVlwI
5K+MkGBoyZfZpx0xLcxuTM7c5Q4eRmp+v+K0rSojV7LOVVHJ4rrHD6slu02pWDqM
HvnRBCGhqucWUzTJ+J/Gx/60OABZWKtHgcY6f/t8GGJBIhm/pAVJBJ9WCpXq/6Zx
5zPaJcWeqkhDn+7VSEBZol/oRH8hhZVKFN9zoJKZk6knAbWqKIJ19aVWwoIe8GFE
A6CNdPiKtldkevAttJE8125sU+xD5hfrdk1FcUkJj+VwQ2tD0N6XlAVVLiHD54Ng
xBFGJmNBZR1LUPfeDrJMpfq1bwtNHoqFOUpcKEMEf37N/BOjbsidNd6JdBWnJDGP
Ral3M02+SDv6y04+YDeGFgXRQe54bBNs1+k3MnVoq6rncWPk69/N5XDnOzj0MoOh
+dFPKDLxWKSDus5kio8xcblKmcmNq8Y7dI2p4L0CpnUBf1rbOBoZO0nOrLLoqM6l
sM6pnWHxtyCiV6n7jLcGlGw7ggbo4QSAN7NXGvWPG3DHHtt9PF1+xEEJg/SSJUVn
stYxmKEGV3To7fqrDaUbiCYoF1lK10KS5lVL18C6YXHwNn7M0b7bVmiZJEolXq5S
H/oiDO6ReLFscqPAbdXFgNsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13327768373315678156805590815209385829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ukishiro.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781024102982003075168898949954318168410968519818921553333733890027652359662369633368879198938139196719291084319543969688982872513435404304108618350779583100239093691811804524378830671384317711698651080780168304268114810703314701475158526136345004104949153493187302399290398075615351904616869630126369426824639758905454225883884652848864640893584897914873693073066795738517956126060624752964927329015618193050972099557074156691468404705860064037093350561551581731261140304768671239218369414281625289638494989612058660669120597966908023675631464747818840162699877301562255007500984414962480846919297297711737474457236701002160379553681482582735100844225091828195652311516053745127290068700803668739864828418718454657517683824486468400374068545286233637644170343722627104478420941799771709858108194622832727780345236700957553921516923381791823866707335583190187093694234372557238313830273061404102276358652343794649439030429148673302127327081906727707945410903251951922946490564004041019072045938874618189194656225495059284214370145827294442585802203784366270797009371536155202589336632180644165305137982314316865249198975400391578834739156997083476600205367293563824646435319426873595283061865203290330776528040206636808023996419637467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fa239ef7732a98ae6b0e8ce7b3f224ab7f3a1fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukishiro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukishiro.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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