*.philippemarechal.ch
Issued by Sectigo RSA Domain Validation Secure Server CA
About this X.509 Certificate
This digital certificate with serial number 32:29:b6:e8:7f:61:50:90:96:e4:39:d8:b6:df:6c:be was issued on by Sectigo Limited.
With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.
We have identified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.philippemarechal.ch
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This X.509 certificate expired on
Certificate Details
Serial Number (hex): 32:29:b6:e8:7f:61:50:90:96:e4:39:d8:b6:df:6c:beSerial Number (int): 66677993779349531999639681412555041982
Serial Number Length: 126 bits, 16 octets
Subject Key Identifier: 2a:d4:03:57:48:0e:02:03:5f:7d:16:64:1a:b5:9a:41:b7:10:a3:28
Authority Key Identifier: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (SHA-1): 12:28:a1:5f:ea:dd:27:68:79:2f:bd:62:22:44:7f:44:d7:c0:b2:28
Fingerprint (SHA-256): d4:fe:db:b2:16:1e:76:f6:cd:a0:1a:f1:3f:d6:f8:d9:cd:96:eb:35:0b:45:18:8d:a9:c6:33:17:86:b6:47:f4
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation Information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate *.philippemarechal.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Technical details of the X.509 certificate for *.philippemarechal.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.philippemarechal.ch
philippemarechal.ch
philippemarechal.ch
Other certificates including the domain name philippemarechal.ch
(limited to 100 certificates)
X.509 Certificate
The complete raw X.509 certificate details for *.philippemarechal.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIQMim26H9hUJCW5DnYtt9svjANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIxMTIxNjAwMDAwMFoXDTIzMDExNjIzNTk1OVowIDEeMBwGA1UEAwwVKi5w aGlsaXBwZW1hcmVjaGFsLmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJrCstz3qAykvLSoPr97WAZ08f1xHuyeo2mcdO9VIstjsCHYJwap12lY89nU 4LjX0f1Ef5Rn/t5OVIBQNw7yVXbZnr/hLi1gmC5r6zpfd9pd7tPxb8YLYZaTmv6Q cgZL81pDvmLEEQTrYorqE5L9MPoM52ozdHsu5ZsR26PGbWHNVruyjNf7pA0oM1E+ SVgJRC9YTsn9NVqhD+/IYQ9LygiVkMw+Zkxx/CmX90Xmjk3N/qLihd6dkgD8n6mi hmQKEg32d6J1RjY5FigABtTEjFM/KyzAw0iElB3pZniCi5fEkiu4Lv0s+4QYV6Qf wReBt+trZoyEQq95DGnW8LHXfQIDAQABo4IDCjCCAwYwHwYDVR0jBBgwFoAUjYxe xFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFCrUA1dIDgIDX30WZBq1mkG3EKMo MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYB BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYB BQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1Nl Y3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsG AQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTA1BgNVHREELjAsghUqLnBo aWxpcHBlbWFyZWNoYWwuY2iCE3BoaWxpcHBlbWFyZWNoYWwuY2gwggF8BgorBgEE AdZ5AgQCBIIBbASCAWgBZgB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr 3IKKAAABfcN2kFYAAAQDAEcwRQIhAJZm5E7b48HDvkWnofdRInibPbPMbZkEpYa6 KQGICd5UAiBgYIJ40i1Y3zkBldA1EenqAqT0x7IGn+2Uiyu+b5TMOgB1AHoyjFTY ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABfcN2kGQAAAQDAEYwRAIgVLnw VfseMf8uXbuU2S7AX27w9G1myeZRgUorI26+afsCIHK+i3JDMe4LKM8vQiO7NUMU tHjQM+XZ1IjrdIkqPisjAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0G vW4AAAF9w3aQNgAABAMARjBEAiBlBeDtfF5HA2B2j7Zg33/fIaYprZgHPSDKSMpm WE1uRQIgDal2rPUBXxixaj9x1TA4gtzSVrnCSKKJNwrDqzdO1nowDQYJKoZIhvcN AQELBQADggEBAK9ewAioCPb2ZrU+jRKFVlKeO63U0iHl2neCIDwgJh/8aeayhQfg 5F+DqonDpZJZvieU4KpNbzteJWkHpPE/M4sIgZ5+vj4fZ9z3DiefOEu2W+lJI8VI jcxCseIN+VOGSJG97HaFhdPBOARM2lvaktw6LtZWVv7CEVDQZp3KeAc3s8DBGY1o szf+9piJLiww5x/gRb/zYeuxCtLnqnEUZf9b1PJnl/73S4TWAHY7wedJJKzRcovi sfXXSHifqWU79ZhJLFQBXTY1DlG9xiMOMneP8TrOXqpmILG6PDt/dFhvY5xrgVMQ gJ7KFEpacgLDJkxwentlvginPPNk5/5ZYiU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJrCstz3qAykvLSoPr97 WAZ08f1xHuyeo2mcdO9VIstjsCHYJwap12lY89nU4LjX0f1Ef5Rn/t5OVIBQNw7y VXbZnr/hLi1gmC5r6zpfd9pd7tPxb8YLYZaTmv6QcgZL81pDvmLEEQTrYorqE5L9 MPoM52ozdHsu5ZsR26PGbWHNVruyjNf7pA0oM1E+SVgJRC9YTsn9NVqhD+/IYQ9L ygiVkMw+Zkxx/CmX90Xmjk3N/qLihd6dkgD8n6mihmQKEg32d6J1RjY5FigABtTE jFM/KyzAw0iElB3pZniCi5fEkiu4Lv0s+4QYV6QfwReBt+trZoyEQq95DGnW8LHX fQIDAQAB -----END PUBLIC KEY-----
ASN.1 Decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 66677993779349531999639681412555041982 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.philippemarechal.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24819023040786055065677684532382520209813215989535716402312246017493712782136071804282290388442564511277848281704315412140144714308023456339436572563620306943421715318372555139579875253931641773345508151024058238021843353062050289322354364348973212405837860803234778592510187933980590431907875366607268504464182665455782721371397872780760031412934789124093388382879613739614390130950031412941543210946768453276634466247447819485374127443350920836119324925009079146089493932433379266824040649086190238142255048913132894230100180230260860873281240978511560095088035808833868043430518686191133304858417004789754684888957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ad40357480e02035f7d16641ab59a41b710a328 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippemarechal.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippemarechal.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 0166007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017dc376905600000403004730450221009666e44edbe3c1c3be45a7a1f75122789b3db3cc6d9904a586ba29018809de54022060608278d22d58df390195d03511e9ea02a4f4c7b2069fed948b2bbe6f94cc3a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017dc37690640000040300463044022054b9f055fb1e31ff2e5dbb94d92ec05f6ef0f46d66c9e651814a2b236ebe69fb022072be8b724331ee0b28cf2f4223bb354314b478d033e5d9d488eb74892a3e2b23007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017dc3769036000004030046304402206505e0ed7c5e470360768fb660df7fdf21a629ad98073d20ca48ca66584d6e4502200da976acf5015f18b16a3f71d5303882dcd256b9c248a289370ac3ab374ed67a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00af5ec008a808f6f666b53e8d128556529e3badd4d221e5da7782203c20261ffc69e6b28507e0e45f83aa89c3a59259be2794e0aa4d6f3b5e256907a4f13f338b08819e7ebe3e1f67dcf70e279f384bb65be94923c5488dcc42b1e20df953864891bdec768585d3c138044cda5bda92dc3a2ed65656fec21150d0669dca780737b3c0c1198d68b337fef698892e2c30e71fe045bff361ebb10ad2e7aa711465ff5bd4f26797fef74b84d600763bc1e74924acd1728be2b1f5d748789fa9653bf598492c54015d36350e51bdc6230e32778ff13ace5eaa6620b1ba3c3b7f74586f639c6b815310809eca144a5a7202c3264c707a7b65be08a73cf364e7fe596225