*.premiumcredit.com

- Premium Credit Limited -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:e2:be:b8:15:d5:ef:a8:d1:a0:20:73:7a:30:10:5c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Premium Credit Limited

Organization: Premium Credit Limited
Organization unit: Datacentre
Locality: LEATHERHEAD
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e2:be:b8:15:d5:ef:a8:d1:a0:20:73:7a:30:10:5c
Serial Number (int): 2506555328378201524544047936902795356
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b7:9a:e1:34:7a:f1:85:70:d8:95:11:9a:7f:d0:1b:41:12:82:e1:ef
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 2c:97:6f:3d:f9:5a:9d:93:d0:e9:ab:ae:84:08:ee:95:32:de:39:76
Fingerprint (sha256): fd:d2:42:19:67:e5:fe:c2:54:4f:4f:ea:ad:27:3b:7c:05:62:01:7a:c1:e5:72:0f:c6:b3:41:32:3a:4a:6e:82

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.premiumcredit.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.premiumcredit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.premiumcredit.com
premiumcredit.com

Other certificates including the domain name premiumcredit.com

(limited to 100 certificates)
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
*.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
*.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
*.test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
*.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
*.test.premiumcredit.com
*.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
*.premiumcredit.com

Certificate

The complete raw certificate details for *.premiumcredit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6cTBSLc8YXATl4MLcjk
qDNoAHDQnZjvpPZTbZpoFwCsEaac0FvCaMvUNtigWxJl+YWCBW4DzaS2njZjs0Lk
bE/bFkSte467tQQvt4z7/8NzRcdyx3CCI0lK4ZTTKyLimpvdka3E7rcK4q1FyhmZ
DyVeGKPIKxCOVvdwBk/VDcRBwSqrb69jP9IBZBoBPdx/VCih/wxPz3mBTxAvR4ik
PypAPUguXkAygf+BednWPzM8rAmLh5H+oAzTMM4RPg2I3Kwl9/tGhcpzWiQ7pHXN
n1EwjYPBlL++ZY1bgzpPESRJN08o8FMIgJ1FHKn24kNPsp38pa1JFU/3nt049BA2
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2506555328378201524544047936902795356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LEATHERHEAD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Premium Credit Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Datacentre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.premiumcredit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23688950435184486051895124393698940443286810825655494611470948436166604956601711768180531183240423876470397664166467059803271351494735163518291360499736672366159168115145457169079786829945019210816765393596318738217175468676115739013424556689854807721021745149751449684623211303122911702578341117409280502764328786190198742654349428265906600569570436336355710560851689234662932692287343026424523894017875831492197925864155818295246905893769782275109424272974997783520880079784697615578255999397715663904825013283894133519935287548606603347049386920479069496878237429551144567660801658114905758465817201647645088560683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b79ae1347af18570d895119a7fd01b411282e1ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiumcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumcredit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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