*.cmentarnik-dev.eu

Issued by Trustico RSA DV CA

About this certificate

This digital certificate with serial number 09:f9:e5:7d:57:b5:49:28:ed:9d:9e:4f:13:18:8d:4d was issued on by The Trustico Group Ltd.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cmentarnik-dev.eu

The Trustico Group Ltd

Organization: The Trustico Group Ltd
State / Province: London
Locality: Croydon
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f9:e5:7d:57:b5:49:28:ed:9d:9e:4f:13:18:8d:4d
Serial Number (int): 13260588482303322366759936954990103885
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:d8:7e:fe:5b:d6:5a:88:c3:5f:23:9d:31:93:c1:c5:c2:b9:f6:e1
AuthorityKeyId: 5d:8a:d1:23:08:2f:e1:9d:81:ce:d9:2c:70:28:ba:97:1f:ae:18:35

Fingerprint (sha1): c2:41:bf:32:99:8b:90:6c:8d:02:6d:01:50:4d:4c:35:0a:b4:2e:f1
Fingerprint (sha256): d8:c9:9f:a5:64:6f:86:45:08:40:98:f7:1c:75:4a:bb:d8:8e:25:38:89:a0:d2:d9:15:57:b0:ed:aa:cb:dd:43

Issuing Certificate URL: http://crt.comodoca.com/TrusticoRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/TrusticoRSADVCA.crl

Check the revocation status for certificate *.cmentarnik-dev.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cmentarnik-dev.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cmentarnik-dev.eu
cmentarnik-dev.eu

Other certificates including the domain name cmentarnik-dev.eu

(limited to 100 certificates)
*.cmentarnik-dev.eu
*.cmentarnik-dev.eu

Certificate

The complete raw certificate details for *.cmentarnik-dev.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcFMAcNJ9vA9Zs19Ktuc
2hffYwYQ4Y/CJ1jeDCkSL7TORqOp1GGlRfYt7xy+JKuM+zfJwui5v5WIMVHPsY27
4JVVm1nVAtg0F1Xarznk/V8k/gxlFTfeKO/kMVnsSKDvf0wsCBMuPYVMWWcd5FIU
lKaQ7Iu9Dp4imOG5TQDLWTlwPaQNGU6QuwjWI06E8vLl8yK7apqdd1p6omIaZ/VW
mbrFqkhtem9eVNWpEnYG191y+NNuKrITScwKjd0WXWaQTQytnbe/4xB39WR/pwoH
aSmewLTl3FKf9F070xYW+7NET4uQyPgVDLY6X40SH5u0Avjs3b3OtKkSnsR0oURn
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13260588482303322366759936954990103885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Croydon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Trustico Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustico RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cmentarnik-dev.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19409778914693335130998751520952025463796144236380750501877346126492328456915569510786651083721006264035845004203141970470107266150497251236315072345094440232232200503806935368686119720221578072080423985594090613334390506831127532737351712516302891576435083435922436666303221788807582678806664316376047022754711091220253675640886791249336369714737705951485527578806930927167301881933455202913011784278274549511404836895519801452291376954802430588428389066186676867736680068658283286622567142197564326960876917103549607667580525115760708755350545999800999174558153854929311243248165812975831003446847074270516741433309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d8ad123082fe19d81ced92c7028ba971fae1835
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6d87efe5bd65a88c35f239d3193c1c5c2b9f6e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.58
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/TrusticoRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/TrusticoRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmentarnik-dev.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmentarnik-dev.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017db99c87250000040300473045022100a8d932852a7ab95612e9679d539c6d739b555e3452c748010562d8e081d3691402207d8f95c6de464b060bc4f6a5df205934034acdab427a7ec03ce8749c863c974e0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017db99c872b000004030046304402202f253f4d745b93715df227bfe111a641399bec03dd7a4dc783e854876581d9d9022040664d2be5991491787f178fe86bde991423a148eb3264d12d73e28272a7b90e007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017db99c8704000004030048304602210084b25e8f24121197556faf975a3beb7b514dedf1ead18401ff85b8320b42e076022100e80b5cc64df1f1c8382339c952dc65dce887316ca07a6135bae40fca6c00aec1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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