completelostpropertyservice.com

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 02:8c:fa:2c:c4:90:39:39:f0:a1:2b:e6:c7:f3:39:eb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=completelostpropertyservice.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:8c:fa:2c:c4:90:39:39:f0:a1:2b:e6:c7:f3:39:eb
Serial Number (int): 3390451701038188645739988688393419243
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 50:06:a1:54:83:c3:6d:d9:dd:4b:76:f0:7b:03:4b:c3:fe:93:a9:97
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 13:85:3c:8b:78:8f:d5:e3:0a:17:9f:16:d9:e5:f8:07:dd:3a:d4:fc
Fingerprint (sha256): e0:d3:23:d3:94:4d:f5:36:51:aa:3b:e5:a3:65:e3:c1:0e:e7:ea:17:5a:d5:59:8d:bd:82:0b:5e:09:92:0a:ca

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate completelostpropertyservice.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for completelostpropertyservice.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

completelostpropertyservice.com
www.completelostpropertyservice.com

Other certificates including the domain name completelostpropertyservice.com

(limited to 100 certificates)
assistenza.3di.it
assistenza.3di.it
completelostpropertyservice.com
assistenza.3di.it
support.completelostpropertyservice.com
support.completelostpropertyservice.com

Certificate

The complete raw certificate details for completelostpropertyservice.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIQAoz6LMSQOTnwoSvmx/M56zANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzIwHhcNMjMxMTA5MDAwMDAwWhcNMjQxMTA4MjM1OTU5WjAq
MSgwJgYDVQQDEx9jb21wbGV0ZWxvc3Rwcm9wZXJ0eXNlcnZpY2UuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPNhFnj3Y38z1aBB7mdmvYr1Ncoa
Dg1ZNE6CZIaatkiHB37sBRbVWcGZSYbrUY0bVkyDUe9xHnbT024EBiDV6G88zW0i
x7IZQFVPrMHOoSMrd5swi9e2ZYs+oGCudCKw8WdYUZrkOTGWOkEZ92RPfRdtLmZJ
+ITb0jQbmvvfC966TUQLikXL8EZ8+A1n/w9sL53gvycNJLsnNN9N7iJmwphkdd5Y
likXp8UFYE0dm+mx95Fy3MmQ0vz5sQ3GWu/w2nvF3/7prEPwCY6s//AltVscWak+
VedTgK3D0vELUecJbbI+/uN21N92xHUxXKL8JJF9JrJADWq5HT/W5xN4pQIDAQAB
o4IDGDCCAxQwHwYDVR0jBBgwFoAUeN+RkF/u3qz2xXXr1UxVU+8kSrYwHQYDVR0O
BBYEFFAGoVSDw23Z3Ut28HsDS8P+k6mXME8GA1UdEQRIMEaCH2NvbXBsZXRlbG9z
dHByb3BlcnR5c2VydmljZS5jb22CI3d3dy5jb21wbGV0ZWxvc3Rwcm9wZXJ0eXNl
cnZpY2UuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0
dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGABggrBgEFBQcBAQR0MHIwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBKBggrBgEFBQcwAoY+aHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0VuY3J5cHRpb25FdmVyeXdoZXJlRFZU
TFNDQS1HMi5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIB
awFpAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLsyrmqwAA
BAMARjBEAiBNC6Lt/XorVDPlIH9Fo15Lor0mrtd0TlDbk+Tns95BXAIgVmS4Fhr7
Le7Sniqm2oD2bDNxJWsNP4IzQ+eoZLcS424AdwBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYuzKuahAAAEAwBIMEYCIQDcOise66VrqCqlToCS0kuP
pvMLaWLQhhJpvGUiSKOBJgIhAKgMocCQpLGMY1Aafa7tZczio+gefAQfWIE8U7os
pkgkAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGLsyrm2QAA
BAMASDBGAiEAxYK/2qXKKqc8tFPHW6MKD0eGbOF1CLGhBxWyd2jf3W4CIQCzrAyP
5tQwVGv7mWmpB5xJ1GBY5iTP7VjqCyEjrueTQzANBgkqhkiG9w0BAQsFAAOCAQEA
VdCfLoUYGhw2SM8k9/p3e4hXjjyLpNpod4kT8zUUpqHbvoejvw1G8b96M9W99FPn
iSuCH7AQ4XdBQ0GsEAV2OUtFPV3PW2BWyri4fQFPir/Ri4ewb1QmY673CeaSpJ1v
bcQg5inG/lPl/YakjXNoSSahmPTfB9+dvTefZW15k/zVDTo2iOjXFL58XgXb1t+H
6JLzVKUKejsXF/bgI/d8YwRwZxfQso2KOeZKwAZ5zXP+xruop0u0Cm9rZk7xVvqj
BBjcADChRH5LgrbhCxiuPqsLh8CGqpGU0o4MgyRyzUG+MBdM6X78Q6/5IWnltk16
jdCj6tL8zVRt1exJaf6j0g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPNhFnj3Y38z1aBB7mdm
vYr1NcoaDg1ZNE6CZIaatkiHB37sBRbVWcGZSYbrUY0bVkyDUe9xHnbT024EBiDV
6G88zW0ix7IZQFVPrMHOoSMrd5swi9e2ZYs+oGCudCKw8WdYUZrkOTGWOkEZ92RP
fRdtLmZJ+ITb0jQbmvvfC966TUQLikXL8EZ8+A1n/w9sL53gvycNJLsnNN9N7iJm
wphkdd5YlikXp8UFYE0dm+mx95Fy3MmQ0vz5sQ3GWu/w2nvF3/7prEPwCY6s//Al
tVscWak+VedTgK3D0vELUecJbbI+/uN21N92xHUxXKL8JJF9JrJADWq5HT/W5xN4
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3390451701038188645739988688393419243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'completelostpropertyservice.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20823096795203348306801924855338247775528406646863549393479659145824832595613206341506566982722887382906570483909883708978109366729954765655282710781098551122659476866671644791632809249515291256459291130932131195024713896089317195662141088088979418342369462869883507273274334096742834041696468989263053698531285071730119892563314776695176839586071262242162217166391854579027431399554313360575334359369500611843343443729278712897674201125072209623828740538636134585922813407597767385740098324689512711020380333404738875301946605630833013038146299655645871527647081452144166877039429530043186341497263455157114616641701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5006a15483c36dd9dd4b76f07b034bc3fe93a997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completelostpropertyservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.completelostpropertyservice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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