crt.sh  Certificate Search

Criteria ID = '2149358575'

crt.sh ID 2149358575
Summary Precertificate
Certificate Transparency
Log entries for this certificate:
Timestamp Entry # Log Operator Log URL
2019-12-04  12:31:28 UTC 857633148 Google https://ct.googleapis.com/pilot
2019-12-04  12:31:28 UTC 4211720 Google https://ct.googleapis.com/logs/argon2021
2019-12-04  12:31:28 UTC 261312403 Google https://ct.googleapis.com/skydiver
2019-12-04  12:31:28 UTC 10728105 Cloudflare https://ct.cloudflare.com/logs/nimbus2021
2019-12-04  12:31:28 UTC 77425020 DigiCert https://ct2.digicert-ct.com/log
2019-12-04  12:31:28 UTC 163363198 Sectigo https://sabre.ct.comodo.com
2019-12-04  12:31:28 UTC 21429683 DigiCert https://ct1.digicert-ct.com/log
2019-12-04  12:31:28 UTC 234797982 Sectigo https://mammoth.ct.comodo.com
2019-12-04  12:31:28 UTC 922431218 Google https://ct.googleapis.com/rocketeer
Revocation

Report a problem with
this certificate to the CA
Mechanism Provider Status Revocation Date Last Observed in CRL Last Checked (Error)
OCSP The CA Check ? n/a ?
CRL The CA Not Revoked (Expired)n/an/a2023-07-07  17:17:07 UTC
CRLSet/Blocklist Google Not Revoked n/a n/a n/a
disallowedcert.stl Microsoft Not Revoked n/a n/a n/a
OneCRL Mozilla Not Revokedn/a n/a n/a
Certificate Fingerprints
SHA-256 2B7AE103F0530C4BA235F7FFC9EB9040EDF4E76FABFAD1EB5A80EE08C5DAB242   SHA-1 B809674FADB29F6C062ACDDE270FFE068184451B
| ASN.1 | Certificate | Graph |
| Hierarchy | pv |


Hide metadata

Run cablint

Run x509lint

Run zlint


Download Certificate: PEM
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cf:1e:8f:1a:a2:88:33:00:00:00:00:50:fb:24:80
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: (CA ID: 1586)
            commonName                = Entrust Certification Authority - L1K
            organizationalUnitName    = (c) 2012 Entrust, Inc. - for authorized use only
            organizationalUnitName    = See www.entrust.net/legal-terms
            organizationName          = Entrust, Inc.
            countryName               = US
        Validity (Expired)
            Not Before: Dec  4 12:01:26 2019 GMT
            Not After : Dec  4 12:31:26 2021 GMT
        Subject:
            commonName                = ft-ota.robeco.nl
            organizationName          = Robeco Institutional Asset Management B.V
            localityName              = Rotterdam
            stateOrProvinceName       = Zuid-Holland
            countryName               = NL
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:c3:44:b2:06:5c:0d:69:ac:3a:c4:e7:ec:
                    2b:aa:c0:bb:2a:f2:cf:11:78:99:a7:f8:d8:2f:53:
                    a2:73:e7:94:2c:5f:17:7a:32:25:61:19:ca:bd:5a:
                    60:58:20:57:76:e6:4d:1b:3a:68:1e:38:f4:ad:7b:
                    53:78:44:56:82:03:0e:48:3d:8a:3c:db:e1:8c:77:
                    05:de:15:eb:64:7b:54:67:09:39:87:5e:50:bd:dd:
                    de:06:1c:48:8b:b3:7a:0e:d9:12:f1:eb:8f:30:88:
                    53:f2:ac:ad:d3:79:d4:1e:c8:6b:6c:78:7f:13:51:
                    cd:53:5c:a2:97:8a:2a:ac:aa:11:e6:a9:f0:d6:b8:
                    df:4f:55:61:0c:d9:2c:b9:ab:0b:d6:2e:03:b8:82:
                    39:15:21:d6:db:c4:97:48:b7:70:07:32:77:83:a1:
                    4f:48:f3:4c:07:29:b7:11:01:d3:07:21:2b:22:53:
                    df:32:71:e6:28:50:a2:82:3a:a1:6e:17:9e:a9:a0:
                    0a:28:31:a2:1d:6c:5a:f1:1c:a3:1b:17:6c:35:07:
                    d9:5d:85:8b:3e:cc:90:a2:f2:92:a0:84:ac:35:94:
                    73:aa:30:c2:b0:43:be:8b:93:d8:18:a3:1a:8f:42:
                    2d:73:6f:57:e9:d6:0a:cb:85:5b:84:f7:df:d3:fe:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate Poison: critical
                NULL
            X509v3 Subject Alternative Name: 
                DNS:ft-ota.robeco.nl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.entrust.net/level1k.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.5
                  CPS: http://www.entrust.net/rpa
                Policy: 2.23.140.1.2.2

            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer

            X509v3 Authority Key Identifier:
                keyid:82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF

            X509v3 Subject Key Identifier:
                F1:33:3C:75:D8:16:41:4B:7B:A9:01:9D:E7:EB:78:FE:36:FC:43:A0
            X509v3 Basic Constraints: 
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         61:1f:3f:d8:53:e3:e6:eb:3d:66:6b:eb:16:23:32:9b:5d:7e:
         a6:6d:3b:b3:26:27:90:22:40:68:6d:80:53:f1:a1:02:08:40:
         36:dc:02:a7:a3:38:96:f6:f7:4c:ab:af:02:f3:83:4b:1c:ac:
         fe:dd:25:47:59:d9:5c:0e:bd:35:fc:5e:73:14:df:b2:2a:83:
         53:bd:37:4c:74:2d:f6:21:c5:03:d7:c6:50:f7:f0:1a:74:3b:
         c1:5e:4a:78:fc:45:f7:f6:e5:af:e1:ed:f2:f3:c9:c6:2d:62:
         fc:9c:60:e7:9f:ba:c7:a2:93:6a:ae:79:fb:63:ab:53:d0:21:
         c4:c1:51:73:e9:ab:9e:d9:d5:1f:bc:ab:8d:0d:34:bd:e0:2c:
         54:b5:b5:6f:dd:c6:b8:11:60:15:b7:99:84:68:f0:c4:00:1c:
         cc:e0:87:e8:85:8c:af:60:a3:17:70:fd:e7:18:22:a2:2a:18:
         d4:b9:30:f0:df:11:fc:02:e9:54:c3:17:86:6b:a3:38:f7:ee:
         d1:51:f8:2a:96:39:9b:39:10:42:1d:38:d6:1f:ba:91:54:f3:
         7e:bc:4a:58:a2:6a:95:d8:bc:30:6c:45:37:7d:ac:14:7c:e7:
         2e:87:c7:40:ec:0e:a7:ac:07:b8:3c:84:c5:a7:3c:d4:bc:ca:
         5c:f3:18:1a