*.pixnet.net

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 29:c7:eb:f3:42:4d:cb:68:cc:a1:8f:64:e2:24:36:6c was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pixnet.net

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 29:c7:eb:f3:42:4d:cb:68:cc:a1:8f:64:e2:24:36:6c
Serial Number (int): 55536400541250389105839052580741985900
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 11:e6:c1:19:a5:43:6c:b8:90:96:08:6b:13:3c:dc:8d:8e:ff:04:b9
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 76:24:31:a6:de:48:3b:f1:9c:0a:83:42:1b:9a:16:81:f7:53:12:55
Fingerprint (sha256): e1:dc:ef:d5:86:e9:5c:f7:0a:2f:34:4b:6d:6e:fb:82:f0:31:4c:57:46:5d:28:b4:b9:3d:6b:67:b1:2e:24:01

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate *.pixnet.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pixnet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pixnet.net
pixnet.net

Other certificates including the domain name pixnet.net

(limited to 100 certificates)
m.pixgoods.pixnet.net
*.events.pixnet.net
checklogin.www.pixnet.net
ad.pixnet.net
staging.m.pixgoods.pixnet.net
villagearoma2017.events.pixnet.net
*.pixnet.net
*.events.pixnet.net
channel.pixnet.net
checklogin.pixgoods.pixnet.net
villagearoma2017.events.pixnet.net
ishapon.events.pixnet.net
ishapon.events.pixnet.net
*.pixnet.net
ishapon.events.pixnet.net
www.pixnet.net
*.events.pixnet.net
af.pixnet.net
checklogin.pixgoods.pixnet.net
ishapon.events.pixnet.net
m.pixgoods.pixnet.net
*.pixnet.net
checklogin.pixgoods.pixnet.net
ishapon.events.pixnet.net
m.pixgoods.pixnet.net
checklogin.pixgoods.pixnet.net
falcon.pixnet.net
ishapon.events.pixnet.net
*.events.pixnet.net
ishapon.events.pixnet.net
m.pixgoods.pixnet.net
af.pixnet.net
samsung-galaxygirl.events.pixnet.net
staging.m.pixgoods.pixnet.net
ahhrtt.pixnet.net
staging.m.pixgoods.pixnet.net
api.i.pixnet.cc
*.pixnet.net
*.pixnet.net
ishapon.events.pixnet.net
checklogin.beta.pixnet.net
m.pixgoods.pixnet.net
ad.pixnet.net
*.events.pixnet.net
ishapon.events.pixnet.net
*.events.pixnet.net
api.i.pixnet.cc
ad.pixnet.net
ishapon.events.pixnet.net
questionnaire.pixnet.net
*.events.pixnet.net
*.pixnet.net
checklogin.streamtopic.pixnet.net
ishapon.events.pixnet.net
ahhrtt.pixnet.net
checklogin.pixgoods.pixnet.net
checklogin.www.pixnet.net
ahhrtt.pixnet.net
ishapon.events.pixnet.net
villagearoma2017.events.pixnet.net
ishapon.events.pixnet.net
ishapon.events.pixnet.net
m.pixgoods.pixnet.net
ishapon.events.pixnet.net
checklogin.www.pixnet.net
checklogin.streamtopic.pixnet.net
checklogin.www.pixnet.net
checklogin.streamtopic.pixnet.net
checklogin.www.pixnet.net
ahhrtt.pixnet.net
*.pixnet.net
api.i.pixnet.cc
www.pixnet.net
staging.m.pixgoods.pixnet.net
checklogin.beta.pixnet.net
*.pixnet.net
*.pixnet.net
m.pixgoods.pixnet.net
checklogin.navbar-demo.events.pixnet.net
*.events.pixnet.net
checklogin.streamtopic.pixnet.net
*.events.pixnet.net
*.pixnet.net
staging.m.pixgoods.pixnet.net
*.events.pixnet.net
channel.pixnet.net
ahhrtt.pixnet.net
checklogin.pixgoods.pixnet.net

Certificate

The complete raw certificate details for *.pixnet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3TKHJTEhYBI4xgDguTT
G+ptkAQ+gr9Q6pLHvrpVQPsmmcvb0PmPTizXXmYdJdNslyrtTsAJmGAgBZGqtI10
pIhb5RrJ1HEDIF7YWr76/vr2Q5OWMoIBGZ7CNE3UV+2rA7q/WGrJe8arhFh/29Uj
m1Pv3UsJuefP+/PB9u9WBuOYnZ1p+JSleLAeX40klIn+bqkLsA2ESWWesh57MJdp
75jKN875m6PA9hvmrn0h98vfZBqmHvd+ONXs5ZZrRoVrOnwcRFhC0PJXObxx4+Av
e4A0mCclUXqoBk3n8CE1+S5oYMhRs2a3rvUCcAsGUtnTDeqzzFIT3kX2mPE3Bozz
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55536400541250389105839052580741985900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pixnet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24674060516595429652759100470736705312971346007021575960322508063947464026390223922308899833641107616595897437983487423265388426516413374827047303335276680485389049458179599005408348198062003674221044590793450693420734713095877571893714890665290646362547236510534533109390192282400274322905368770087131908266846855474865142435648107911303567541325767054549808862687800877733951011350592187356782530665224558654110867574652511215402041337559162635556270050342435688459361021858236443786374582103071097786164479311774890794724203795584620110748749203677498254162070146994360614670185959140464599511342245653664437695469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11e6c119a5436cb89096086b133cdc8d8eff04b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixnet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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