DV SSL/TLS Certificate for www.rihauntedhouses.com

Certificate is witin its validity period

Issued by DigiCert, Inc. (GeoTrust Global TLS RSA4096 SHA256 2022 CA1)

About the www.rihauntedhouses.com DV SSL/TLS Certificate

This certificate with serial number 0a:11:be:a7:58:d5:12:0d:9b:b0:85:3e:6b:d1:36:d7 for www.rihauntedhouses.com was issued on by DigiCert, Inc..

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.rihauntedhouses.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0a:11:be:a7:58:d5:12:0d:9b:b0:85:3e:6b:d1:36:d7
Serial Number (int): 13384415920864351815727276988738647767
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: ff:83:58:c0:79:b4:96:27:e6:fa:6f:35:87:7e:a3:42:43:89:55:e4
Authority Key Identifier: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (SHA-1): 3d:01:f9:3a:de:5d:74:99:23:94:aa:23:f3:50:70:cd:20:a3:a4:c6
Fingerprint (SHA-256): fc:99:57:2f:88:d7:30:6a:20:ec:ba:51:06:aa:e9:80:06:7b:98:0f:08:44:21:27:e3:c5:07:6d:d2:32:b7:48

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.rihauntedhouses.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.rihauntedhouses.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.rihauntedhouses.com

X.509 Certificate

The complete raw X.509 certificate details for www.rihauntedhouses.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3SXfN32T5+KSxpRWbt
DZjVDQvNpltSsZdhd5otuiVLwPZWAG9rmXc76UWjduoXJv4ZnH8+ypKq+ochLN2Y
bAroM8Ur6Xj3ZWpwF38WF5q655y3ukT0kVVYp9FogMgZ6N/+1CL5OJOrjpbE+wF7
DanDUoOONQyY5wG2x+KqHbZw6g8PXHvLxxl+HOszce3fIl8GU8TNgJ45OCnwDVdt
eLcAI67xwryWi7/ZqtW66qhcy7c4FenYDctoRx/Wajs268gmK/v8o5SG0XCTorya
JcTvld3TIDYYe1WXWK5jilW5/+kXNnzFS5rFuX/bvSppZfCmp4yQrE37ezSXWnia
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13384415920864351815727276988738647767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rihauntedhouses.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22374665418191916369915990318100873715599104155478681690923585957169831384891959615018573681853044210275113432884144442948744282597651752889472663781316503394230270637419321639547031009014703181377201354885775185972216242742009738210340497962145991763784837727789063462330052997600190740944682664440556277939599105067759301981139416914955469060372889631068073320347695335418126384486887367771024655908456648350823896517109247795515286500628100311552522625882276185742305503822159729240987358453817803858450309664799178701415669479092610580688793407494387566621896074515207599140847264540550294054421261225579347745509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff8358c079b49627e6fa6f35877ea342438955e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rihauntedhouses.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e210000019852e2c76c000004030047304502205e16bb2304c90ee5ebfdd2de0a6a14efe9a0ba8ee577e8cce8000c579d1663c6022100a3691b1516408efce2360d0002fc37f44babe26043c9478cd575b9575fa8a3cc0075006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf00000019852e2c79b0000040300463044022013884186692c17eb25947abf88d070629f2f876c49446a88eb7a0ba752828d2302202ec33f0a0a3d89721f3ac8166637ecd7d7626bb5ebdfc01a8864273103707e9b007500499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c30000019852e2c7b8000004030046304402205349e239b4d98d1a17a3310d72e7cfb8956042be4117bed71026a05a2e575a390220155ccb39b21aa0f3a8421b48d92e493f37fb3fe92f6ec18d1bf06a124e18e017
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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