betterhumanapp.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f0:db:4d:c6:16:f3:2b:52:19:be:6b:67:64:96:f2:2d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=betterhumanapp.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): f0:db:4d:c6:16:f3:2b:52:19:be:6b:67:64:96:f2:2d
Serial Number (int): 320153409440217239517006122652095935021
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 52:1b:06:37:4f:98:f2:3a:eb:32:87:2d:11:5e:5b:2a:78:59:a2:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 18:a0:51:d9:9f:a6:fd:56:ed:a5:26:54:b8:fb:26:78:2f:4c:8b:17
Fingerprint (sha256): ed:2f:d8:04:d8:99:c3:4d:b2:bb:88:9a:e2:77:8f:ae:0b:e0:c7:13:07:2d:28:a5:37:55:66:32:38:58:f7:78

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate betterhumanapp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betterhumanapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

betterhumanapp.com
www.betterhumanapp.com

Other certificates including the domain name betterhumanapp.com

(limited to 100 certificates)
liquorstore.klvnmarshall.com
app.abodist.co.nz
bots.business
www.rikvanloenhout.nl
www.evseed.com
www.betterhumanapp.com
www.betterhumanapp.com
saturn.penzigo.net
docs.dlex.io
beta.betterhumanapp.com
app.cardiotracker.app
betterhumanapp.com
www.betterhumanapp.com
www.oy-brigade.work
beta.betterhumanapp.com
dev.efficiencyontario.ca
www.soccerbond.com
page.upliftyou.com
wongsylvia.com
maker.ficklefate.com
betterhumanapp.com
www.betterhumanapp.com
www.glo3d.net
betterhumanapp.com
www.betterhumanapp.com
betterhumanapp.com
betterhumanapp.com
dash2.betterhumanapp.com
dashboard.betterhumanapp.com
greensdiary.jp
www.firecms.dev
betterhumanapp.com
dashboard.betterhumanapp.com
www.betterhumanapp.com
autocompany.johnghidiu.com
www.ritasartstudio.com
betterhumanapp.com
greensdiary.jp
app.wildorchidwatch.org
hanusinykacik.pl
cajasycajas.com
coming.desdea.com
www.co.storr-testing.app
www.erikmonjas.com
betterhumanapp.com
www.firecms.dev
betterhumanapp.com
app.wildorchidwatch.org
betterhumanapp.com
shoes.training.mindyourpass.io
www.attollose.com
caregiver.sios.life
www.betterhumanapp.com

Certificate

The complete raw certificate details for betterhumanapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR4lIzwN9sfkt2rXZ8xI
csIVnKbiY4MHMG66lUDsGaM0ooGI/boBu6I4pjXmD4QBWbE9C3ZvNBLGCyREgwUA
7ClsgmFAk5bnwSQxfepgPchpJp2qLwvv+v9fsAS7s9JMGVCfHxvhY+Q22z/WAWsN
lFBVjQn391GbPCT8yzoIkM5FDGfvN3r+A9P7bylyY5/VT1FZf3tOVUvY3JGppfVb
iQ5phCG5GxSYeMCqhcfgiCETRstteoJjYa8/FAEHuNVb/aq4Brm94J4ZFI+GQOM0
2e6xA+EFwEca5pXhXBq8X6nUEh3VXhmIauycKCwz1ip6e/pU2mMwrMjRYxxKz3CF
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320153409440217239517006122652095935021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'betterhumanapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19834278967168854177875462438758953406421371555631241944144737405363908516411503478634061279832156414504026460710095528045157176614737305827619380506307602706983613513013774267493324144014058753577093654405824492363981061007022994441829015129375419928291632801068326555801148798144256516031875049900564924911914649293585867855042247318526389936262101643013170522593667747544425844770180792585846240465084663937170507487664094610964214792154954920952813654949885632792901687755934311153725510617478135124940814846449954764735482861298449887667463177295659453847877831249070753722308656051373382074814194471700433765791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							521b06374f98f23aeb32872d115e5b2a7859a22d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterhumanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterhumanapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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