app.recngo.com

Issued by GoGetSSL RSA DV CA

About this certificate

This digital certificate with serial number 83:01:1e:c8:84:6c:1c:59:a2:c8:ab:dc:b5:a0:94:c7 was issued on by GoGetSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.recngo.com

GoGetSSL

Organization: GoGetSSL
Locality: Riga
Country: LV

This certificate will expire on

Certificate Details

Serial Number (hex): 83:01:1e:c8:84:6c:1c:59:a2:c8:ab:dc:b5:a0:94:c7
Serial Number (int): 174134684103585845745694978646053262535
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: aa:7a:29:3d:8c:22:b7:74:87:15:2e:e4:a2:61:f1:fb:ea:73:e9:c3
AuthorityKeyId: f9:fb:50:c4:8b:67:bb:67:64:fe:83:21:a6:a9:ce:3f:55:84:93:99

Fingerprint (sha1): 25:d2:48:f5:fc:7d:c4:c2:ab:63:77:1e:6c:30:fa:a9:30:4f:5b:46
Fingerprint (sha256): df:75:47:89:3d:d0:9d:ea:73:4c:f0:b5:b2:e7:70:5a:79:b7:a9:1c:4c:f6:80:1f:29:cd:22:45:71:1d:8b:c7

Issuing Certificate URL: http://crt.usertrust.com/GoGetSSLRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GoGetSSLRSADVCA.crl

Check the revocation status for certificate app.recngo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.recngo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.recngo.com
www.app.recngo.com

Other certificates including the domain name recngo.com

(limited to 100 certificates)
mybusiness.876get.com
tonypedia.org
dashboard.recngo.com
recngo.com
app.studiodld.com
refundra.daanh.nl
www.lumbungkasih.com
www.kukoo.app
www.tibas.berlin
www.platohub.com
recngo.com
nannyintheair.com
recngo.com
play.singularityonline.app
www.our-wedding-page.de
app.studiodld.com
links.recngo.com
www.appexpedition.com
recngo.com
recngo.com
coronail.ynet.co.il
menu.sunsetdiner.ca
entrepreneursakiya.com
tonypedia.org
entrepreneursakiya.com
app.recngo.com
dashboard.recngo.com
recngo.com

Certificate

The complete raw certificate details for app.recngo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzROGgSg8TJcfs3qH9sE
d/CKoDtBAW0QOQEFaaV27vFu3H/Ri9OTQ0gpj1c/GagvRtAi60rxtToDj0hAPv2Z
/ijbDgSFigOF1cbLNwY5A3O1perL2rvisWliC0ydwEmZNpIwpAvDaU8rQrmsLyzo
6SP3V5YOCKJuZ8LHGQ20XMlf3M0ZJnzDssXXsdPqCdmSazyIr7YmZ9hYhppvQ2FJ
usTW87DUH4rIOqZuz+gMAqebKJjgX0ncxFORQXg/acBlX2vV1kiyS92cxikkBZRI
qAefzqsIJA0D+Ad0kg/P4PaPyh+DmjieaqvHflcr3LxFN+BqSzFWu11iUCSTLWLb
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174134684103585845745694978646053262535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riga'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.recngo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24137308846989629398998994711502070610011185565152969436541944773508089958029904200353862098571643638291968897007546365784875717381060552435171838225827883031480172907563918736231811018754273516877736409503428946226031359194244479347474575158858415618177098251526457331027180001182876150034824605535961670514710560533088538257941040940713073614061910912188576255474745656122741422417485310790022280480405766618369007334803514092494417325387039354103255169569813961550267582816217152619989783418296798826619217683774725495831948340780059942562540630778752551829894271704184395843397061591276370559134987517434379033429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f9fb50c48b67bb6764fe8321a6a9ce3f55849399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa7a293d8c22b77487152ee4a261f1fbea73e9c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.64
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GoGetSSLRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GoGetSSLRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recngo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.recngo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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