*.totemcg.org

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 0f:03:93:5b:96:99:2d:83:0d:e5:6c:3d:72:90:f6:fa was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.totemcg.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:03:93:5b:96:99:2d:83:0d:e5:6c:3d:72:90:f6:fa
Serial Number (int): 19956985597931800217669065517395146490
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:f1:70:59:34:74:b0:52:55:0c:ed:59:07:52:76:fe:89:cc:03:55
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 82:7a:a3:d8:f8:08:82:45:3d:bd:b4:03:8f:8a:0e:d9:92:ae:69:28
Fingerprint (sha256): c8:55:5a:21:5a:6b:d5:ee:01:a4:b6:c1:b8:61:3c:10:32:be:d7:96:e7:e8:cd:fb:f4:4f:1f:a9:69:43:7c:b1

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate *.totemcg.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.totemcg.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.totemcg.org
totemcg.org

Other certificates including the domain name totemcg.org

(limited to 100 certificates)
certainty.bgistrategy.com
scorecard.bigsmiles.co
adigital.your.scoreapp.net
pjs.your.scoreapp.net
*.totemcg.org
aviadev.your.scoreapp.net
salesdna.mtdsalestraining.com
fontevo.totemcg.org
fyr.your.scoreapp.net
scorecard.yulancreative.com
fontevo.totemcg.org
adigital.your.scoreapp.net
fontevo.totemcg.org
scorecard.antoinetteoglethorpe.com
scorecard.ciaraconlon.com
fontevo.totemcg.org
adigital.your.scoreapp.net
scorecard.specialistretailers.com
collabor-8.pmlgroup.com
*.totemcg.org
fontevo.totemcg.org
scorecard.vickiwusche.com
*.totemcg.org
*.totemcg.org
healthcheck.totemcg.org
leaderdna.your.scoreapp.net
scorecard.changeready.global
*.totemcg.org
crisis.your.scoreapp.net
brand-symphony.your.scoreapp.net
adigital.your.scoreapp.net
fontevo.totemcg.org
fundingtrack.your.scoreapp.net

Certificate

The complete raw certificate details for *.totemcg.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Lwdy5p0jkSBQ4kQmAn
cWgpyWSqceUjLIAlrqE+uiM3AfxmKaHSDqcHf2TKwreL9d8vvV/nA5ctFQT+Ikt6
k1L2eloceQ7igBkMOU6TsN9kjE8pNRRgf9YRBZ5hOFM+MfW49pHQg8v64PXlaZGo
mVda4DosL6S4VkQSb6/lY/6w3iUr4mGNZ+7UPhfdtO19uTPsPC0HCf8R1ehWMj07
bhuCbWX65CAkV+BkasqUlTJqFAR43uyWrCUubdrA6LoPySmkJz5pRO5cA/Kl5EKZ
mDE5wAIowlxJ5W3ePKeklAXVJ0ejbB78GTFpvOpf/i8eOiYeq7+NhppGoz3me8Bc
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19956985597931800217669065517395146490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.totemcg.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23686911401260914631442425385914574174664134136319597837779561254704831319075341637958506362330115619169165001801125788114606766696516704901045339171358006398999243385480660871913280904175154144543347634990764292088597631434109788259453465940853958741285854321352717163774631183505518475850559232394152580307099398784661878021798129661708432906221181718270351740495464782741970434666822116260168386717749829476475923191031344340379539944651220593919992081577987886212132253587311062411827034998211796235317503246535812159632866615953880236957466074558070525724724955383591574266384039903609643991606700064664321023019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f170593474b052550ced59075276fe89cc0355
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totemcg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totemcg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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