southside.futurice.com

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 04:4f:31 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=southside.futurice.com,OU=GT78635763+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:31
Serial Number (int): 282417
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 67:1e:62:85:03:33:ff:f9:27:3b:4e:8d:99:cd:c6:0d:f6:a7:6e:d3
Fingerprint (sha256): 00:1b:d1:c4:ec:dd:56:e2:a3:8b:69:e1:6b:11:48:cc:68:59:ad:7a:c2:35:42:84:cc:c7:d6:eb:19:47:82:2a

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate southside.futurice.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southside.futurice.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southside.futurice.com

Other certificates including the domain name futurice.com

(limited to 100 certificates)
southside.futurice.com
intra.futurice.com
hours.futurice.com
futucamp.futurice.com
go.futurice.com
cdn.futurice.com
fira-tyopoyta.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
haskell.futurice.com
hours.futurice.com
stew.futurice.com
api.fum.futurice.com
travelsurvey.futurice.com
palvelumuotoilu-hackathon.futurice.com
power.futurice.com
play.futurice.com
haskell.futurice.com
xr.futurice.com
open.futurice.com
avalon.futurice.com
intra.futurice.com
login.futurice.com
hours.futurice.com
blog.futurice.com
travelsurvey.futurice.com
beforeiforget.app
meet.futurice.com
iot.futurice.com
www.zebraspring.com
support.futurice.com
play.futurice.com
open.futurice.com
irma.futurice.com
biometrics.futurice.com
haskell.futurice.com
cdn.futurice.com
labs.futurice.com
iot.futurice.com
projectnavigationgame.futurice.com
joukkoliikenne-hackathon.futurice.com
fira-tyopoyta.futurice.com
access.benecontact.com
analytics.futurice.com
go.futurice.com
fum.futurice.com
tyopoyta.fira.fi
intra.futurice.com
confluence.futurice.com
askwhy.fi
www.futurice.com
biometrics.futurice.com
futuwan.futurice.com
beerandtech.futurice.com
jose.futurice.com
fira-tyopoyta.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
theme.futurice.com
stew.futurice.com
valmistavanteollisuuden-hackathon.futurice.com
futuwan.futurice.com
futuhours.futurice.com
bamboo.futurice.com
cdn.futurice.com
valoisatulevaisuus.futurice.com
iot.futurice.com
iot.futurice.com
login.futurice.com
tammerforce.com
go.futurice.com
stew.futurice.com
techweeklies-podcast.futurice.com
futurice.com
analytics.futurice.com
hours.futurice.com
biometrics.futurice.com
wow.futurice.com
haskell-ci-cache.futurice.com
tctvsoctrang.xbot.com.vn
share.futurice.com
stew.futurice.com
cdn.futurice.com
blog.futurice.com
hours.futurice.com
askwhy.fi
palvelumuotoilu-hackathon.futurice.com
outblock.io
play.futurice.com
hours.futurice.com
sodatab.net
beerandtech.futurice.com
docs.futurice.com
requestbin.futurice.com
testliveopen.futurice.com
xr.futurice.com
stew.futurice.com
iot.futurice.com
beerandtech.futurice.com
techweeklies-podcast.futurice.com
support.futurice.com

Certificate

The complete raw certificate details for southside.futurice.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAplC7pGR12E3LxgF/16In
E1JclT7ZILfj0Ry60Kr+w/gk5E+eFy3YzMpdGVojM+87Qgfeqe+E8uwMJ+B3IvL9
Mh1oH0Ou6Y250czMJ7dF+rjsRFia8h2xqWxZj9rrB5wkdWaTjHYrgwm8Tgrl6XLE
0NpDYusbYUKJhOAEfvv9eLRLkuIP5YpSCo7aGVrBlDZPakwbpMtSK2qfjbv69jSx
VBeLsSWrALaYa3j1ftbs2bR2qmaDO/zriUBP6gVPzDnPDNEbfy1gxswNM+XhuQwC
YFwlTRVfLv6AbpihjmoAP8Mxlhx60BvClD7v47sUH+FtF9MqpAZavgtsLWOp98I9
tGlP1m2MFKgw5DGoJgbH5Vfs3vjf909fDykTao0ts7dW24+mQhXb2BvUSvnq0mix
mCF0+nHILd8lZhLG8b+98X37+/NVG517EGF97+wkhWkJc5QQT1puqH4L1/93exQ2
Da6AUwp/RK7p/D1siwQsVfwq14vMBY/b9gY8Wpl0dIajyEIU4VPyqzrupn9WaUsN
bMa39phwJkEm7eo/Np8or17Fc+6rV4TvHrrZLCrIYLuSnXnDT7+BxN3CMbut9s8m
uGhIDIkZ/j4PIctn08AfpfvwGtfFNfLoKB8ZcZYRs8Ah2/W6WqbS90x2k8KkudWG
b6JSTZQKdssLYRZ5CL1Lh4UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-11 21:44:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-13 03:50:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT78635763'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southside.futurice.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678507484867290964404956856620105403748886578742559886084983627071639526944652221456191335784944775397571585732542303679883719183029471558252938125752384677178864902202638128321448502785422440051303908039855558549854824091655592910996746192054696498455586082869595068369804254610219512810505313434431214482653855621260675699911086951515848448458180702242364420176386478046082721121094049452512695881364456635949512661130375851622147227941994114720816093098784466463922301338985802084322400419193949864057975862914739847142309589163503466215392466131011063823648420529231479914337357667282068687975886299544121158110185475385187281890926251755631497962288142670363504004556941194666357137082741226900050205358304528485251267527638173101647184707490001347413315012031310440030360159725094101944141501024785961200583981890207776014337427690541406472629535822541995832303828680364919777626968104539735387935974143477334934775109109464110091020255407423997658682465294571406835024811658038576695168652241563804214858467633483824562467734438332772126809038668254574145498288400646321536184023604397452499729379243113792526874291477639786904036937506949718116419260215503378569436483447350121531995016599197280597720496669066149330170906501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southside.futurice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab2714a10cd513cc42db2fd0d88290d29a1e51d2c91416f81c70b14a1a142b5fa84374ce3a2be8972133897689b19c60dc94645c5e1969583b9f33438df9cf82fd6e098254d60e7ac12213f76c889aeb261cdaa6904580ec716419006bb6a57bb4838c079d05a54b0e80e180670487714aa84c7950e85f9cb3bff75d1a62da67d233b46f8b8f47ffbf809668669018379f5152c25b8ca48f34c0882921b97ee5c597f7e88a329e86a77fec2f7fd53ffb43bd52ddaab67fac0394f7b7c93375fbf0cfb9e8bc0d4e0817e2dd974f0d8c037f7f3144cbc47578ffac1d15cc217e4fda74647e4fad3a331b79fe59d58f0e76505db60529b7fd8aff6c03be8590e7ff