cpdmtg.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:30:0b:85:97:ef:a4:21:56:c6:58:d0:cc:8c:26:05:92 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpdmtg.com,OU=Domain Control Validated by OneClickSSL,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:30:0b:85:97:ef:a4:21:56:c6:58:d0:cc:8c:26:05:92
Serial Number (int): 1492202041716976377295847556122907834189202
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 88:c9:cd:d6:9a:05:e0:c2:93:17:37:b9:c8:d6:cd:c0:25:83:79:c4
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 60:c3:71:8e:58:ab:04:72:55:cf:80:e6:51:3c:aa:d2:5a:da:7f:64
Fingerprint (sha256): f0:27:f1:a7:0c:1d:1b:3f:89:5f:fb:83:89:77:31:dc:d5:09:50:27:24:f4:48:18:82:7e:9d:b5:89:a9:2d:55

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate cpdmtg.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpdmtg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpdmtg.com
www.cpdmtg.com

Other certificates including the domain name cpdmtg.com

(limited to 100 certificates)
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
www.cpdmtg.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
cpdmtg.com
sni.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
cpdmtg.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
cpdmtg.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com
sni52857.cloudflaressl.com

Certificate

The complete raw certificate details for cpdmtg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0yDEB/erFDQNVMGDWY
Y73qjue475ZsjllnO+OTx2i++jDQOucWBHFAbCsmX3mpw51HN+K5eSf9Bn+WT5Tk
pJ8sWntsfZHhpY4K+wDDeanjVPnuFfZEUz2Tfmmv80Ga9XqsBM6xQk/eNRfSDvQ9
Soz2N851+kQyaLBirpbt4DZlo1u0ZDp/HfX3YOPwVgDD50vUEpKAGyoG0zK6M1x6
8thyM20UMAazHAE0nI0/35OLHWLw4GP4Im6G/ZJ6pY8CQYjEi5xpEL4qVwXRD4bT
sJySHxGO+684zH+dm9/Wvi4AngYKxsaAJzDqzRTDGKMKYJD7oGFx0qlor5KIT/Tv
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492202041716976377295847556122907834189202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-31 12:39:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-23 14:01:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpdmtg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24449398742348918144582414762769336079261300194326620348244097816327491376306233176723814312610707089328482036744163478756186621987442481183869576426275805285749499527954803603148761086110418148817860556855038175456349711972826368394441328538540969615340845297802372569005252308347867030644460999388438995590338137017753490211436743353406659203970323467701760008618700119590171077711194129236395163914095451262956983889613915274270863671286618196312936883941799254737568932133265676644758187067353416307129978933394470303347036267496290814666375296832864969173560406930407412061041630516454441581275864831069049384711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpdmtg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpdmtg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88c9cdd69a05e0c2931737b9c8d6cdc0258379c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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