vpn.archermalmo.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:13:f1:de:b2:15:6e:3d:f1:c8:4f:60:4c:30:b5:7e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.archermalmo.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:f1:de:b2:15:6e:3d:f1:c8:4f:60:4c:30:b5:7e
Serial Number (int): 4091243332147707356306713701845611902
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a5:df:9b:c4:6c:1d:1e:a7:3b:e4:82:bd:e4:ac:3b:e4:2b:f4:c4:c8
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 83:0d:6a:2b:95:77:07:04:9c:3a:15:a5:0c:cf:39:6d:d0:d6:b8:22
Fingerprint (sha256): ee:68:96:b6:e8:f9:17:a2:28:b9:82:06:3d:99:7a:57:6a:e7:a3:db:9e:a4:80:b0:00:49:9e:9f:62:f3:a1:39

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate vpn.archermalmo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.archermalmo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.archermalmo.com

Other certificates including the domain name archermalmo.com

(limited to 100 certificates)
thelab.archermalmo.com
www.archermalmo.agency
inside.archermalmo.com
inside.archermalmo.com
archermalmo.agency
supremekidsschools.com
bi.archermalmo.com
inside.archermalmo.com
app.shoppingsaobernardoplaza.com.br
inside.archermalmo.com
inside.archermalmo.com
inside.archermalmo.com
archermalmo.agency
www.binarycube.in
vpn.archermalmo.com
archermalmo.com
inside.archermalmo.com
luminarlab.com
archermalmo.com
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
thelab.archermalmo.com
polaritylearning.com
www.led.money
cesarbarone.com
www.c21caribbean.com
inside.archermalmo.com
bi.archermalmo.com
inside.archermalmo.com
archermalmo.com
webvantage.archermalmo.com
archermalmo.agency
inside.archermalmo.com
archermalmo.com
archermalmo.com
inside.archermalmo.com
crystalbank.net
www.impactus.kr
archermalmo.agency
archermalmo.agency
thelab.archermalmo.com
api.img.tips
sandhurailings.ca
archermalmo.com
www.mattsxmaslist.com
agency.yumi777.com
cvguided.com
thelab.archermalmo.com
www.archermalmo.com
m-ficheinteractive.etoh.app
archermalmo.agency
archermalmo.agency
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
www.flairboat.com
metzger.cool
inside.archermalmo.com
handmade-events.eventmaster.jobs
inside.archermalmo.com
archermalmo.agency
archermalmo.agency
vpn.archermalmo.com
www.archermalmo.agency
archermalmo.agency
inside.archermalmo.com
thelab.archermalmo.com
vpn.archermalmo.com
inside.archermalmo.com
www.archermalmo.com
bi.archermalmo.com

Certificate

The complete raw certificate details for vpn.archermalmo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4091243332147707356306713701845611902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.archermalmo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822054856522138191238247326292001068253296246713137221349219312301372615807932691161876762845038052369330286746939079159733454426256176078745891012198016329983674789774203796761232366503334943314854660347414371501663029561625478835234430641882078445997446331721704773936461877534186014004248699408840075987743596576408358408774181418136263157334096466090684256913396727623970981796537010535156444433465905903995708981318022785423365114830472025996281040350063417650630748200951545314004676456602650654451246004021509659527000252973568230881035435513916450954621360634832929240956928601856640569759861273799112500078487369490579083719348121016607486260232055198528063242802232010667358005950587175377054273372371778447066405830977688231195863192227273438502028558280178662716398827494333041920723890244088197982265357784482138516152346435667418554754553794633307230906791407465307447569055806384695144452860900802098174317501943992136759309857025346135948980803238279046156105075228341999172900619805228733605181382475246583462943558883999708034650021446684955825661375752284538279797347318647026611358171592894570960479100320546529915187131346349178045233947305618087758033434538344084390205431363119319953802259880643711959800357623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5df9bc46c1d1ea73be482bde4ac3be42bf4c4c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.archermalmo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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