akaraisin.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 24:61:1a:0e:ca:d2:69:c3:66:54:13:f8:0a:74:73:6f was issued on by Sectigo Limited.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=akaraisin.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 24:61:1a:0e:ca:d2:69:c3:66:54:13:f8:0a:74:73:6f
Serial Number (int): 48356389158149165706636373393340134255
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8c:d5:0a:d8:09:63:fb:99:fc:e2:bd:1b:79:7b:10:73:91:30:94:43
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 04:82:be:8b:76:dd:73:3c:2e:85:6c:c5:3a:00:57:6a:6e:4e:46:10
Fingerprint (sha256): cf:25:f5:fb:a4:ae:fe:3b:76:af:02:08:21:20:96:bd:89:a2:57:ed:fd:f5:bb:7a:43:69:b2:73:6f:11:33:a3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate akaraisin.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akaraisin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaraisin.com
covenanthousetorontoevents.ca
gillerlightbash.ca
give.orbis.org
m.covenanthousetorontoevents.ca
m.outofsync.ca
m.supportthepmcf.ca
outofsync.ca
scrabblenightincanada.ca
supportthepmcf.ca
www.outofsync.ca

Other certificates including the domain name akaraisin.com

(limited to 100 certificates)
*.akaraisin.com
akaraisin.com
*.akaraisin.com
sa519gl.wpc.edgecastcdn.net
sa519gl.wpc.edgecastcdn.net
landingpage.akaraisin.com
sa519gl.wpc.edgecastcdn.net
raisincdn.akaraisin.com
*.uat.akaraisin.com
sa519gl.wpc.edgecastcdn.net
sa519gl.wpc.edgecastcdn.net
logrocket.akaraisin.com
sa519gl.wpc.edgecastcdn.net
raisincdn.akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
*.uat.akaraisin.com
akaraisin.com
*.uat.akaraisin.com
landingpage.akaraisin.com
raisincdn.akaraisin.com
covenanthousetorontoevents.ca
landingpage.akaraisin.com
knowledgebase.akaraisin.com
covenanthousetorontoevents.ca
*.akaraisin.com
akaraisin.com
*.akaraisin.com
*.akaraisin.com
akaraisin.com
sa519gl.wpc.edgecastcdn.net
*.akaraisin.com
covenanthousetorontoevents.ca
p-log-rocket.akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com
*.akaraisin.com
logrocket.akaraisin.com
*.uat.akaraisin.com
sa519gl.wpc.edgecastcdn.net
*.uat.akaraisin.com
sa519gl.wpc.edgecastcdn.net
*.akaraisin.com
raisincdn.akaraisin.com
covenanthousetorontoevents.ca
*.akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com
sa519gl.wpc.edgecastcdn.net
*.akaraisin.com
*.akaraisin.com
covenanthousetorontoevents.ca
*.uat.akaraisin.com
landingpage.akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
*.uat.akaraisin.com
akaraisin.com
landingpage.akaraisin.com
akaraisin.com
raisincdn-si.akaraisin.com
*.uat.akaraisin.com
covenanthousetorontoevents.ca
*.uat.akaraisin.com
raisincdn.uat.akaraisin.com
akaraisin.com
knowledgebase.akaraisin.com
p-log-rocket.akaraisin.com
covenanthousetorontoevents.ca
knowledgebase.akaraisin.com
*.uat.akaraisin.com
*.akaraisin.com
sa519gl.wpc.edgecastcdn.net
akaraisin.com
akaraisin.com
raisincdn.uat.akaraisin.com
*.akaraisin.com
akaraisin.com
raisincdn.uat.akaraisin.com
covenanthousetorontoevents.ca
sa519gl.wpc.edgecastcdn.net
akaraisin.com
akaraisin.com
*.akaraisin.com
sa519gl.wpc.edgecastcdn.net
akaraisin.com
covenanthousetorontoevents.ca
akaraisin.com
akaraisin.com
sa519gl.wpc.edgecastcdn.net
knowledgebase.akaraisin.com
*.uat.akaraisin.com
akaraisin.com
akaraisin.com
covenanthousetorontoevents.ca
covenanthousetorontoevents.ca

Certificate

The complete raw certificate details for akaraisin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSmae4VFqM6QIKW0Dl9K
c+Vz1MPdQ4WGh3nUaZUepWmhTOB8j0FNQHo1zlu6kQBGHnWDD04/YuWJAGLE4q3M
99ZMk/wsb+GsLAM8Ru9x7xxsJpvzACE9QbDCqo+H3Es9idgVzpHdF37Ni/4jA72u
H3svZPvu4T1rWNFnQDzfWutQs3A3HDQZoNaGMWrhftVQAYkJhcKlMDU+HUDVylOe
0P5hao0GiLgLXur+dU94Dce0hjtUGVNAig40kCdYb4PYsvzVA4bW0f5uhBx47cLQ
2Hd93W4jtQ/+tQUo4rD4PeJyUI8jK+1EzG7WedGu+17GqFxzNG+4SXCWZXavYqdk
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48356389158149165706636373393340134255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akaraisin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21859742183599633133002841242059377300656909717890490182006678331201165434697653486842979344475099297129219158563058429430422303596402945055454057074924377810418880532557250994904421063202385192187544894133543564579273057852139762171512147261989787434396479359224804621100982860836422363606078109789951156596604874700877573706393914127109809550446149636422445093619427418096378578638752220243239794497914610472185877243262625952248540198170054924672745542242216526449735650615457475794387889496064950921865748784824619096348622739072014586551965001766798722411537030302914495322524309771250363736420302697003288585399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cd50ad80963fb99fce2bd1b797b107391309443
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaraisin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillerlightbash.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.covenanthousetorontoevents.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.outofsync.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outofsync.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrabblenightincanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportthepmcf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outofsync.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00731baa83eba95187ef9ff9c38e5a7d7ddb2acea755fa111a2e4983cebe829ca14145d9c3118c0219cd3c1406d8e840836075b16c4529a7d717b7c158a981efb22d3d7a346d79357981500ac80c489679415a825489ab36f59724965cb8464ce0beb5fb53eedfc018f1ae6a38cf5e7ff0678eb3e813a74c74423c77b95afe3d009f008524fdbc970367f8b82fa4328a12662f5bbca5f03edf5f59e2cd434d43ac1f82056ec727daeb21a8fe674693a8b24c1118719454f546fd78b4299b1035392cb439da4b0b3bc795596be070ac95fd8d35703d39e980f1c1b361f4fe850712b56c26296fc7a62989391da0a02be394347ddcce1de05c6418d0af21c1a2b2dd