contpaqiprofit.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:cf:79:93:6a:93:50:29:3d:ec:49:73:91:7d:65:dc was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=contpaqiprofit.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cf:79:93:6a:93:50:29:3d:ec:49:73:91:7d:65:dc
Serial Number (int): 21015691237575880548284928971465647580
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 24:a3:0f:68:08:d6:fe:fc:41:8f:d6:05:3b:63:4e:67:7d:00:ec:c0
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 7c:43:44:24:32:77:1f:69:50:9b:9a:f1:2a:c9:5e:9f:f1:80:b3:5b
Fingerprint (sha256): e6:37:1f:ac:20:00:1e:22:cc:e8:4f:3f:b5:cb:63:8f:8e:c4:54:e6:e7:14:f3:61:2b:f0:b2:09:4d:f8:91:ab

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate contpaqiprofit.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contpaqiprofit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

contpaqiprofit.com

Other certificates including the domain name contpaqiprofit.com

(limited to 100 certificates)
themusicportal.app
prana-apana-balance.be
www.contpaqiprofit.com
amp.jesi.app
contpaqiprofit.com
univercitythehague.com
themusicportal.app
contpaqiprofit.com
contpaqiprofit.com
app.whitecloud-dev.com
akairo.net
amp.jesi.app
spel.rottne.party
lcsf.turnosweb.app
attire.app
intra.app
contpaqiprofit.com
contpaqiprofit.com
prana-apana-balance.be
draper.net.za
spel.rottne.party

Certificate

The complete raw certificate details for contpaqiprofit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCr/QfG08IOE/LG/9dQO
Ve5WpPfsdHOi4Kk1rSHGdmLcPFAqAQZoQX5XTA5otCMyDKvVUTgPhq/jQa+aGh4f
AbJ8dFr4tleweQsa/BUvzGz6PIRIDDcfvnDsd7yGDqWzuQ8SN9iAIhhPB6RUSg0L
d6AbESyxUrZyj4wLeKqp9I2kTAsrBFFq2Zvg2dkh74OiCsr4YFApP5aHTyQb8M9K
k7mZcknnSqtjtJ4FJqbn8DrYp79fWNFmcOKOZvQSKwBlx9+Rt7BFi4w4WqjNhA6V
1JTy9VtFxW4rYjoZwBuYYO4brUb8poehjSc7hRNqOXheofB2YrY6ccL6Nvcf5pdc
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21015691237575880548284928971465647580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contpaqiprofit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23249050773987974525413009621143991218126762551488080007753974047030205848288470978338403017098663128886068769438572852007909933934404522224972982221672780730864576102283569271892445374035521865908791201830931163211337051112559884028073996766249663678803314740742044986373430020699091840535248677408694356224508073027496081570179165262219985180725428928395939004090022051895613920857388256976739163607523636985280951234125920006212596509422025706500998778054229854595483542999642766541767313573230351636112546447232562526406523576605473688959225666823456459119964939994427304726814993735155614920290232059058055503009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24a30f6808d6fefc418fd6053b634e677d00ecc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contpaqiprofit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00b4bb08bd6de2994b6043b3583b2058c6310bb2e9f6e6839cc11bc5874c7c4916b714a87c0737d2f8d8d9583e271a9afd40a8631e7cf20b8328f1aefd40d2720b71037723b9ed9e7309c50ab48b4f92c6af60b99aa418aac6879e21cfc542b53ae559d5e13a12296c7f391544b57c619077ed801b225df5a4038198341fc83daef6e7c104cc35eb53d21ac5468534bf84b8c8679a583ff9cd7f3d5ecbd84cec45d3a790045937afbcb85a4c7cbae0205248421a89ea08eec8a3acae0cda8670485a3e59b79fa6d7aa2f907f3c8b26559a22090c809d197ed3cbf10b20438a7c8c092db79f830a8e07b7f054f17f73e2a38abcd76148a15f3e9b8a565a80ae9771fd8aa271995bcb0e70877717ff2ce8e50ed03d424d170578e0cbef6e1c24a55ce14ba4adee9a106cfd654440b6d9ad7b64500392cc20b11e14096862fad109f9a20f4bead475160588d0ba3dec93522eeda3f2280c4261a24134db88526098b8e4d279121b712d52717f2ddf28b19ff9a6f8ca842f1ff8effa07684eb217ec90ab9451488e674174a9ea3c011cab0334eca9a9e48f5966ca96d5d0c795682baa3b9a80e62aa3c7ac9b4514bc44cf24ecf430fc67b9ed862d78641b42f4c8cdea126a27fefca8e765781ef084a2550e10b3598645def531a53b9fe59828257e67eae30db95f984aecf680b389bb0faa7ed22e309eeb36366fb8217104bbb15745