*.sonax.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:2f:b2:9f:18:7d:21:16:f2:51:53:59:1a:66:74:8f was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sonax.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:2f:b2:9f:18:7d:21:16:f2:51:53:59:1a:66:74:8f
Serial Number (int): 17527624771321245236202808583922283663
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d7:d4:f6:fe:ca:68:2e:06:15:7a:92:5f:ce:16:64:ed:dd:23:79:7f
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 8e:16:f8:a8:ff:3d:9c:00:9c:c9:29:71:34:13:ff:60:f9:46:52:cd
Fingerprint (sha256): c5:46:8e:10:be:31:7f:df:80:b4:5c:79:fd:e6:d5:79:3d:2a:13:a5:f2:13:5e:73:1b:b2:d2:94:28:ca:b3:77

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.sonax.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sonax.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sonax.com
sonax.com

Other certificates including the domain name sonax.com

(limited to 100 certificates)
qr.sonax.com
admin.sonax.at
*.sonax.com
sonax.com
*.sonax.com
www.sonax.es
www.sonax.fi
es.sonax.com
admin.sonax.at
www.sonax.fi
cc-one.sonax.com
*.sonax.com
admin.sonax.at
admin.sonax.by
admin.sonax.at
sonax.com
admin.sonax.by
admin.sonax.at
www.sonax.es
admin.sonax.at
*.sonax.com
www.sonax.fi
admin.sonax.at
admin.sonax.at
*.sonax.com
admin.sonax.by
sonax.com
*.sonax.com
sonax.com
admin.sonax.at
*.sonax.com
www.sonax.fi
www.sonax.by
sonax.com
*.sonax.com
admin.sonax.be
admin.sonax.at
es.sonax.com
admin.sonax.at

Certificate

The complete raw certificate details for *.sonax.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17527624771321245236202808583922283663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sonax.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714570277758175404669704054805991778892910306464856467422754006397732458619755481031205149502957650000633410257700672040123361767070256396803263704411070176792278114008526821045170282361959350124562704615205134432102447816179723393446678502998913631880419841177736974978222975688374039301745295914643832111761467706561913849833294000842212077837195658942030120261522978647739049767449347314157583879440593604154920867560369263345714648021581015486769836893077783233233830009534179665148185563532112269679382502621169007029382914329218095376729371947868780137544161556339403278899404886597693216793873559583485355793407460174532489934717992796529384945877035478621789659586330651805547740060093477938242473374001592938210299634498433742680683625517221892425322450561607886066950389160964148975121931478694125875853140820869341573379485606701058885171351872883996264667657284323669326174781204093198470667718102813440905808542122349912372101589533069219252236036064020204858108743089613579616320369971103346390991865505693470057155176236969743073579922878365190452762436005141632610059161369626618147093932418126432077711182246823351338126333554582684172586966888308977873932399152997676548913512599939580575339991536884074280415992049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7d4f6feca682e06157a925fce1664eddd23797f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001841e5f278f000004030047304502210093f23c1e19476abc906d76e917affb6fec59b9a220cb1616739cb26500e194ed022071ee4a0985e25ddb689c402bce24013fe5a59c3b4789019357f6bfbb8c576c9a007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001841e5f27ba000004030046304402204500c24b11359de42492f4d3eda9ec7a063803ab3a33cf5a0e8f29af6e16f660022048263a53d4568fe20d719c53f6aca63c5f9098133a29e025c8c975cb3d09d5e9007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001841e5f276c00000403004730450221008eb1714f6da1856fa872649d1881ef6587618b369cf08160531dbc4a3fba4fb80220576e0c1bf8b20d83a529aac9fcecd9b1e55cd597fe9db750ccca9324023de9bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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