DV SSL/TLS Certificate for thinkmills.info

Certificate has expired

Issued by Sectigo Limited (Sectigo RSA Domain Validation Secure Server CA)

About the thinkmills.info DV SSL/TLS Certificate

This certificate with serial number 33:63:f3:9e:43:cf:b7:4b:01:ec:be:ba:17:ed:ce:9a for thinkmills.info was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for thinkmills.info provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 33:63:f3:9e:43:cf:b7:4b:01:ec:be:ba:17:ed:ce:9a
Serial Number (int): 68309606338595630942398252084928302746
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 0e:ef:47:a7:ed:ce:da:e9:9e:54:95:45:81:2c:a0:7b:80:f7:bd:93
Authority Key Identifier: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (SHA-1): 25:48:8e:24:17:32:45:ee:62:55:30:ae:04:06:db:97:59:94:a9:9b
Fingerprint (SHA-256): 4e:9b:8a:6a:1e:17:4e:53:41:74:c0:b7:ad:6f:3a:df:36:01:a1:15:7d:56:c1:e1:b0:ae:df:ad:76:95:82:36

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate thinkmills.info
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for thinkmills.info

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for thinkmills.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIQM2PznkPPt0sB7L66F+3OmjANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTI0MDYwODAwMDAwMFoXDTI1MDcwODIzNTk1OVowGjEYMBYGA1UEAxMPdGhp
bmttaWxscy5pbmZvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvEe
Qf3OSicqyzSq0h6RqL0/+atxRT9OjQgGksBNZnhzsrNqEPrjlNsiT7IzkP+VSLHz
kSmnmX6kW9Y/51eSdJHhrp0s2j+Bidbv/CPtUZnNi7lx/GS/7C73Ic3EBZfLnD9v
4pFq9nIiQs6Yb1ugIdKH1aG0H3gOWy+g+E3Qmzst2UvJ75PYiSabV4cvadVHKktT
8Dm2x0Rgr5A7NjlZNvvAjCaR6FV8cvl7sTRdb25rDDvXliWLlwlxFRglnNjNyXhS
NGkYN7igPna6DOPENwlzuX9kzaK+aKC5GSC1n7rQRYd1ED9Up9X9ZXRXk7UguHVP
8WAd/CqzHi7tBRaGBwIDAQABo4IDBTCCAwEwHwYDVR0jBBgwFoAUjYxexFStiuF3
6Zv5mwXhuAGNYeEwHQYDVR0OBBYEFA7vR6ftztrpnlSVRYEsoHuA972TMA4GA1Ud
DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEW
F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEE
eDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29S
U0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzAB
hhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAvBgNVHREEKDAmgg90aGlua21pbGxz
LmluZm+CE3d3dy50aGlua21pbGxzLmluZm8wggF9BgorBgEEAdZ5AgQCBIIBbQSC
AWkBZwB2AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABj/nElkEA
AAQDAEcwRQIgTtF5uaq/DU75tI5Ip24PlC7f+bXbmDsQBs6NB3j7xGECIQC0KkMm
upmT7nQtjMhNSyjjZMh0gyKGnbi3uf1Wnbla4QB1AA3h8jAr0w3BQGISCepVLvxH
dHyx1+kw7w5CHrR+Tqo0AAABj/nEliAAAAQDAEYwRAIgL7wIdX1qUcGMxYcTGw4D
UyimAgIDWgOLAKh3/sXLxR8CIEUbjzSWWDp+THteYXIKQQIBCfm2qIXPNMLEc8K+
OEV6AHYAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE6+WGJjoAAAGP+cSWIAAA
BAMARzBFAiEAsSwA6/5MjKJRJn9iYV2oxF8+KzF/s0km/Ld6H6oA7z4CIDSp4HAl
uU2Ys7pjiXrmI+eYqTdcFCO2H+uEcu4EzeirMA0GCSqGSIb3DQEBCwUAA4IBAQBC
V9Cl3npCkNbpk5KabG0H2W7nZauNNsY9Cu+MR/ZMdcZhDtM5rlBk8qmND9Dtv9kU
oMPsHDbP2+RfQwzM0+0HoJYiw/C0tG7fjgKUqMgDF2G4+iwmcKyUadnvNghnu88u
K8xj2IsmQxxJaEfYDMueY+yHPBI1ILUF7UW0WEWPDac1AndMPhDHUwIlfQUGIzXa
zYrxIGmtsnHyCa8tko6Y1/WpOzjKWMFlC8MH6CK14g2l/GbQS5UbiS38ol+IR5Ov
F7EpiejSN5vB/B6uEDs9AeFFmB/ZBuzPkqjkZWEGdeBsE8ROPkdMsXj9oTl9qAEw
CyPwatF41Ff1lEPygEPn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvEeQf3OSicqyzSq0h6R
qL0/+atxRT9OjQgGksBNZnhzsrNqEPrjlNsiT7IzkP+VSLHzkSmnmX6kW9Y/51eS
dJHhrp0s2j+Bidbv/CPtUZnNi7lx/GS/7C73Ic3EBZfLnD9v4pFq9nIiQs6Yb1ug
IdKH1aG0H3gOWy+g+E3Qmzst2UvJ75PYiSabV4cvadVHKktT8Dm2x0Rgr5A7NjlZ
NvvAjCaR6FV8cvl7sTRdb25rDDvXliWLlwlxFRglnNjNyXhSNGkYN7igPna6DOPE
NwlzuX9kzaK+aKC5GSC1n7rQRYd1ED9Up9X9ZXRXk7UguHVP8WAd/CqzHi7tBRaG
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68309606338595630942398252084928302746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkmills.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21074458437505401192422529756323176443597236586335288483407731441890719586451513987327872888545247338853756381914086913045606961934864021873070338802919153716084859868643787417721971307759462121754031763774103092467519614659739688572356214421329015572849259781672022030774309531197357832503824008131452230268517379493511228427528061518208086917167642826915203625615416273907469116490837223049531938138982434633842107695126970856714380056892735642693401380309172352376370758857301430005728643519541979566250524616481212976378477883060574845586717994020925988332489469932265792877398955357350377385486838756642305508871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0eef47a7edcedae99e549545812ca07b80f7bd93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkmills.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmills.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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