spunbag.com
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number b1:f7:5c:9b:2e:48:03:3f:5a:66:a5:0c:1a:7c:6c:68 was issued on by ZeroSSL.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=spunbag.com
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): b1:f7:5c:9b:2e:48:03:3f:5a:66:a5:0c:1a:7c:6c:68Serial Number (int): 236557730854360306039424739506365688936
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: a3:9f:09:2e:1e:33:3a:16:51:19:94:1a:50:ff:50:32:81:ac:86:ee
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 66:f3:69:dd:d9:18:30:d6:c5:c9:cc:c6:f1:15:18:da:fa:ea:72:99
Fingerprint (sha256): dd:30:ba:b1:08:82:5e:ec:3d:95:a3:30:b3:a1:4d:18:e9:bf:d2:46:21:7d:f7:74:8d:df:33:84:93:84:6a:00
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate spunbag.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spunbag.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spunbag.com
www.spunbag.com
www.spunbag.com
Other certificates including the domain name spunbag.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for spunbag.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdjCCBF6gAwIBAgIRALH3XJsuSAM/WmalDBp8bGgwDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMzA5MjEwMDAwMDBaFw0y MzEyMjAyMzU5NTlaMBYxFDASBgNVBAMTC3NwdW5iYWcuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OYROTsvTKLfWkel56g2g1z+DaEW6M/QI74g 9N90RgM/OWVmT/ZhSJor5rOk7+gHimGroFeJTiJo0zLKKQEZMQMGboz16cySfcsu deEdOC8pum90S7ZQF+oivHs8FiAVjZXWwPXT8+WyB0MK+TcRyc9ipZ+ysnmAolMF DEytjeD5wjkiX0mrRfIU4YFUtQ/EuBH6BwRhQVk2vw2SilILhInvpXPR1qmXzrDM 7HlEbNyGSw6PT8d/2cd642x8umhX74KGEIKUgv3aN+TMng5TtSNgsmrDem05RMgZ ChhvWtjto69BPEAviaASyZ/np/fz5jo8QoG/oXZtzHZyGel0HQIDAQABo4ICiDCC AoQwHwYDVR0jBBgwFoAUyNl4aKLZGWjVPXLeXwo+3LWGhqYwHQYDVR0OBBYEFKOf CS4eMzoWURmUGlD/UDKBrIbuMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysG AQQBsjEBAgJOMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BT MAgGBmeBDAECATCBiAYIKwYBBQUHAQEEfDB6MEsGCCsGAQUFBzAChj9odHRwOi8v emVyb3NzbC5jcnQuc2VjdGlnby5jb20vWmVyb1NTTFJTQURvbWFpblNlY3VyZVNp dGVDQS5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly96ZXJvc3NsLm9jc3Auc2VjdGln by5jb20wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCt9776fP8QyIudPZwePhhq tGcpXc+xDCTKhYY069yCigAAAYq1W0LOAAAEAwBHMEUCIQDNGyP36UT1PUVGMfWC tI5fN/jEZo3blMep14TSXPCQsAIgbt1eLOwDwuMvIg3Te4W8Yec77P2pWeYqRwn4 Q9V7gQoAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYq1W0Mf AAAEAwBHMEUCIBv0nBHV4NMZVLdoNIbX2mBEXO7beBY2nczmUOVWG2kJAiEA6+PI G7tuWci+jg6qZbZSZ5cE0c9a/+FSkeAHJ5pBIF0wJwYDVR0RBCAwHoILc3B1bmJh Zy5jb22CD3d3dy5zcHVuYmFnLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAO6J9+loU eBqxGcZQE87ivnfMsQ5qyWiqhOZaK6vQFhpbYG5/CbkYqcwOna4f6nE7f5eYX5de YxtkD8o24DMLqyh8La6PH1DKSU9m5mbWXdNz3c6IoJLlWzxVXWY6DwVJ/gjPSX3G CUxmTu4YgeUKmBlOw5wzJwqNRGjtc7aLxOS+0DbF6siP3TbHC5iQdybiRFpBtXVB lkVa39wkhwad9wxgw/H8XlixSolSAYp5b0ANrQeetz99NXFkdnwTuZrNvFMrWdqQ qhGtJrkrZnWtHUew8dVuAy8W7IU+WSKid9MHa3mguvAxE7+i9ewWGPcjP7bp0W0n r7Uj3sNzCWN8wgEg/qnqaygbXapL7EA4HRB+lIAfAN9hmekDcHqmwfhpQb2Kk2YW 5lfbpbkLXFjIgjU4P7RT9sK+EaAZsAOZFGBxJiADduWzXGcga6xnGmYmv6HuFp+P eTHXgEAXkqw5TiWQ9mulpvQpve9GnOk8tPXeIwbCe7bh84ZJvniPalKtlf5sRfp5 GLg1s6kyvBzyXHByeiuqI5S98zgYKy3MkTxomyAPzhwdopVsF0b6tIg6gG+OInhU hPyB65jE6eD08vb+MLh0zm/pTssSsVmXKRAZP1pVdcUCW6EEqRONNfJRla3wws7E aIIeCUnKz8zBvxAdVSZrNmi4knBwvTmYjXk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OYROTsvTKLfWkel56g2 g1z+DaEW6M/QI74g9N90RgM/OWVmT/ZhSJor5rOk7+gHimGroFeJTiJo0zLKKQEZ MQMGboz16cySfcsudeEdOC8pum90S7ZQF+oivHs8FiAVjZXWwPXT8+WyB0MK+TcR yc9ipZ+ysnmAolMFDEytjeD5wjkiX0mrRfIU4YFUtQ/EuBH6BwRhQVk2vw2SilIL hInvpXPR1qmXzrDM7HlEbNyGSw6PT8d/2cd642x8umhX74KGEIKUgv3aN+TMng5T tSNgsmrDem05RMgZChhvWtjto69BPEAviaASyZ/np/fz5jo8QoG/oXZtzHZyGel0 HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 236557730854360306039424739506365688936 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spunbag.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26371017836830235850256579906727556014898114164839589986028165634294668282314894455134771756241563117032833414760594984531976307122384827828915234542811975888652618787766429872095376689282393683747075326621453366554507918774421884728876754061324831972570674280304302464333809781381037047851678189247174497712461837182684905099089071022525567468704475690912784737497481533799083304554566701848333747175519985143464625027248545252733052029498197487368620099732757735001717523356080637018193256993052652476254583688189678255760270143608007309986057255100203114576696434614391507778720898105670861872749984333443029890077 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a39f092e1e333a165119941a50ff503281ac86ee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab55b42ce0000040300473045022100cd1b23f7e944f53d454631f582b48e5f37f8c4668ddb94c7a9d784d25cf090b002206edd5e2cec03c2e32f220dd37b85bc61e73becfda959e62a4709f843d57b810a0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab55b431f000004030047304502201bf49c11d5e0d31954b7683486d7da60445ceedb7816369dcce650e5561b6909022100ebe3c81bbb6e59c8be8e0eaa65b652679704d1cf5affe15291e007279a41205d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spunbag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spunbag.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 003ba27dfa5a14781ab119c65013cee2be77ccb10e6ac968aa84e65a2babd0161a5b606e7f09b918a9cc0e9dae1fea713b7f97985f975e631b640fca36e0330bab287c2dae8f1f50ca494f66e666d65dd373ddce88a092e55b3c555d663a0f0549fe08cf497dc6094c664eee1881e50a98194ec39c33270a8d4468ed73b68bc4e4bed036c5eac88fdd36c70b98907726e2445a41b5754196455adfdc2487069df70c60c3f1fc5e58b14a8952018a796f400dad079eb73f7d357164767c13b99acdbc532b59da90aa11ad26b92b6675ad1d47b0f1d56e032f16ec853e5922a277d3076b79a0baf03113bfa2f5ec1618f7233fb6e9d16d27afb523dec37309637cc20120fea9ea6b281b5daa4bec40381d107e94801f00df6199e903707aa6c1f86941bd8a936616e657dba5b90b5c58c88235383fb453f6c2be11a019b0039914607126200376e5b35c67206bac671a6626bfa1ee169f8f7931d780401792ac394e2590f66ba5a6f429bdef469ce93cb4f5de2306c27bb6e1f38649be788f6a52ad95fe6c45fa7918b835b3a932bc1cf25c70727a2baa2394bdf338182b2dcc913c689b200fce1c1da2956c1746fab4883a806f8e22785484fc81eb98c4e9e0f4f2f6fe30b874ce6fe94ecb12b159972910193f5a5575c5025ba104a9138d35f25195adf0c2cec468821e0949cacfccc1bf101d55266b3668b8927070bd39988d79