www.1spatial.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 40:9a:14:70:de:0f:fe:e9:88:c4:92:a4:14:8b:9d:b3 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.1spatial.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 40:9a:14:70:de:0f:fe:e9:88:c4:92:a4:14:8b:9d:b3
Serial Number (int): 85870620036920263808317643591332371891
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 13:71:a9:e3:c1:e9:dd:ec:b1:49:5d:41:15:d6:12:71:14:af:2b:b2
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 35:6b:1b:ba:09:01:f0:af:d4:8d:88:75:34:88:f2:81:ee:33:d6:58
Fingerprint (sha256): e8:c0:cf:0d:ff:0f:88:51:df:9c:9c:8c:0b:5a:97:be:e4:7d:e0:47:44:88:ca:3f:5c:11:a0:96:e0:84:27:19

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.1spatial.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.1spatial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.1spatial.com
1spatial.com

Other certificates including the domain name 1spatial.com

(limited to 100 certificates)
demo-1int.trial.1spatial.com
*.1spatial.com
mt911-1dg.1spatial.com
go.1spatial.com
1spatial.com
go.1spatial.com
rizing-1dg.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
spatial.shr.kisshosts.co.uk
pentest.1spatial.com
pentest.1spatial.com
go.1spatial.com
go.1spatial.com
*.1spatial.com
pentest.1spatial.com
1spatial.com
1ssupport-1int.1spatial.com
missouri911-1int.1spatial.com
*.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
*.1spatial.com
www.1spatial.com
1spatial.com
go.1spatial.com
1spatial.com
pentest.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
mt911-int.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
customer1.publicsafety.1spatial.com
pentest.1spatial.com
*.1spatial.com
publicsafety-test2.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
pentest.1spatial.com
missouri911.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
go.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
prod.30.slot.cdn.salesforce-communities.com
mt911-1int-dev.1spatial.com
tmpa-bulktest.1spatial.com
www.1spatial.com
pentest.1spatial.com
publicsafety-1int-test.1spatial.com
pentest.1spatial.com
pentest.1spatial.com
www.1spatial.com
1consultants-us-int.1spatial.com
1spatial.com
go.1spatial.com
*.1spatial.com
prod.30.slot.cdn.salesforce-communities.com
dg-example-cloudcommon.1spatial.com
pentest.1spatial.com
defrarules-dev.1spatial.com
1spatial.com
pentest.1spatial.com
mt911-1dg-dev.1spatial.com
go.1spatial.com
www.1spatial.com
www.1spatial.com
pentest.1spatial.com
*.1spatial.com
pentest.1spatial.com
go.1spatial.com
1spatial.com
*.1spatial.com
*.1spatial.com

Certificate

The complete raw certificate details for www.1spatial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRDFeiwyIflk61AFfN6k
k8M/hYYpzSlXUiAV3sf7EKvaqRcovyumOHPpT+uR3C42FYsNNXSr77ss50pDYejt
aaLAjiKMtUt45NSIpqcsR8XAB0A8oa2WVj2psE4p5c9KSthXLOVAYQjtVvllTAaL
x7+Ge6iQ6qzQBRtgKSimH0CNFbvnQKVszRssLzmqMC1DJW7a+koa3AzlpOW+VBfl
Wxxrl3EWTysK8hF+So2JRvk/Pe58pCNvfjOm23hPRxp2jp4P3O0uJJqs9ytB4a8c
5IRwV06spIGv2G29AXbS6ZU/6/DAtvepLDMS7ac/1oh5g2aRovfpiotIYy9qkRPy
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85870620036920263808317643591332371891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1spatial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21342543822601209400990556240361996053324534406980667885289844726921113326430607386081743208839865206550214839734770062857729618360003684072664391768363854483209751771117697568179859286981624412319882403707393686076806123451134203711816166888999362261830298337048370744178999574583836287178765950470963724180024182402530449240584549362194526462295368562657887663982498650244525089866072369797669131402761858348482046061946565797394272368313448567012854094680534697198855613900586922454355130985274377021942742265893127858202794902989029130921302207158596893279077982487629789536227921851094939837972264357241296253653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1371a9e3c1e9ddecb1495d4115d6127114af2bb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1spatial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1spatial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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