aptitude.digital

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:04:09:6a:7d:5b:a7:97:1c:82:d6:ba:cb:4c:02:77 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aptitude.digital

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:04:09:6a:7d:5b:a7:97:1c:82:d6:ba:cb:4c:02:77
Serial Number (int): 6667100145026807952055257411825173111
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 50:07:ef:e9:a6:3c:e1:b2:a7:04:88:e5:c9:3c:cf:40:e3:c7:72:8e
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ce:1e:38:52:1e:43:af:01:9a:e5:d7:dc:f6:96:a3:57:9c:46:6d:eb
Fingerprint (sha256): f9:d4:69:1e:9d:da:f1:c5:16:8f:22:c4:8d:06:8a:6b:fc:52:f6:ee:f5:98:30:bf:43:7a:67:19:03:fd:e6:7d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate aptitude.digital

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aptitude.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aptitude.digital

Other certificates including the domain name aptitude.digital

(limited to 100 certificates)
enterprisepartner-support.wontok.com
jobs.rocket.chat
enterprisepartner-support.wontok.com
cdn1.aptitude.digital
hr.indicoweb.com
support.ascisecurity.com
careers.aelieve.com
jobs.rocket.chat
aptitude.digital
jobs.rocket.chat
aptitude.digital
assist.netcomplete.net
support.ascisecurity.com
talent.oppnex.com
support.ascisecurity.com
desk.mebitech.com
enterprisepartner-support.wontok.com
enterprisepartner-support.wontok.com
enterprisepartner-support.wontok.com
support.ascisecurity.com
support.ascisecurity.com
support.ascisecurity.com
helpdesk.essoft.com
remote.aptitude.digital
callcenter.lifestylepanel.com
support.ascisecurity.com
erp.aeronux.com
jobs.plannedgrowth.com
jobs.rocket.chat
jobs.felippa.com
aptitude.digital
cdn1.aptitude.digital
support.omeganotes.com
aptitude.digital
enterprisepartner-support.wontok.com

Certificate

The complete raw certificate details for aptitude.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KcFc5uHHXeGSt6Uxe66
VvtUKzWJc8V3I4lNnQ5OK665OZcerZiiqMvoq7sj8l2NTcvK+OdBdSycXS4yfGiv
T3KNtI4GckmjRTmnnnyRNOOg6lKwA/rDiDlRgtXeoKqIJzvVG5dnEF0q6pZUHx/n
HjyohsbR5+ze0ReBZ8fjOMSHJfEuirP2WRVddGSM+TlD9fc+6W/QxRiLUYC4guvC
XHS3knUwbuhknOUGlJmhZa3fIEeuWWK4QZ9I8HDDqWpGKvNC2nnnrNR2uuuzX08C
mRg/U9P8jnbA1gK9aS8y9gQZJq26PkRArRl5CSOk7X64eehGo53bL7aB6nTF4JW/
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6667100145026807952055257411825173111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aptitude.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27349835143018268039496641438634919579951870649240612222215679147969612497773493154558558120892020581424438201272369955222030023720164026264547189342337730937264335601169555800307069064456308136109286608162317977293631930683034859793193757728360565415842612975763455462211319656825139056160470204847157818396038111435133379174776893474171417637498649521777159758700849506096934155422351284138813491083939475867483387646854463411223668824102535543570649303446460529462822276343460169702368875828194090607047063820311372204333948692513524393687286162263646255154505149498481655565461536242493422009659609229112821268361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5007efe9a63ce1b2a70488e5c93ccf40e3c7728e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptitude.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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