facebook.bars.ufc.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 3e:2d:1c:51:01:b1:5f:8f:c2:de:72:07:03:66:4d:ef was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=facebook.bars.ufc.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:2d:1c:51:01:b1:5f:8f:c2:de:72:07:03:66:4d:ef
Serial Number (int): 82646363422772833422138321324336369135
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): f0:ea:2a:57:a2:8b:67:38:34:c1:07:19:38:97:a5:34:c0:f9:0b:9e
Fingerprint (sha256): 00:fa:67:ae:77:4e:71:e1:a0:ff:9d:c7:65:48:6e:b9:3b:62:86:a0:49:ec:b0:0e:c1:b0:c1:57:76:bf:0d:01

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate facebook.bars.ufc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for facebook.bars.ufc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

facebook.bars.ufc.com

Other certificates including the domain name ufc.com

(limited to 100 certificates)
au.ufc.com
3fadmin.govdelivery.com
facebook.bars.ufc.com
*.ufc.com
ftp.ufc.com
webmail.ufc.com
2021convention.ncte.org
au.ufc.com
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
live.ucdavis.edu
5766752193478656-fe4.pantheonsite.io
a.ns.christiancentury.org
ftp.ufc.com
academi.ufc.com
dev.ufc.com
communityadvancementfirm.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
on.ufc.com
a.ns.christiancentury.org
alumnimail.albion.edu
71.ufc.com
live.bme.cornell.edu
5766752193478656-fe4.pantheonsite.io
*.dev.ufc.com
5755424754106368-fe2.pantheonsite.io
jp.ufc.com
ftp.ufc.com
ufc.com
*.test.ufc.com
5766752193478656-fe4.pantheonsite.io
collector.ufc.com
5755424754106368-fe2.pantheonsite.io
ufc.com
asikmpo.discoverlosangeles.com
alumnimail.albion.edu
alumnimail.albion.edu
5766752193478656-fe4.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
2fsupport.govdelivery.com
webmail.ufc.com
2fsupport.govdelivery.com
5755424754106368-fe2.pantheonsite.io
on.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
sters.us
71.ufc.com
5755424754106368-fe2.pantheonsite.io
*.dev.ufc.com
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
*.ufc.com
on.ufc.com
on.ufc.com
ufc.com
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
rewards.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
jc.edu
ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
cci520-new.courtinnovation.org
jc.edu
2fsupport.govdelivery.com
collector.ufc.com
71.ufc.com
71.ufc.com
5766752193478656-fe4.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
*.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
cervello.ufc.com
sandiegozoo100.org

Certificate

The complete raw certificate details for facebook.bars.ufc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW/Q+XeiejFKlYMsVwCB
LBLfOhjiKxu5HSTkHL3E9VT0ZlqOMHR12auEJYpc5IgdwKd2H9HcpVHkVArruqHy
XaAOuv5WvkBM2K+FmeQTaQ6L/rJit0RJMD1Go+AHbFGSeJbGi98gMBSOxkUINX1X
gUPNOSoHxC2LBBtAZkGrdCubYaLttmvsUwLEqlbNYMTwkeqrhSfi+jO4GJhFyyzE
cdpP/XmFaHReNtnje81N7hG24z+m4dvxGNwH64XRFum68xKaIgEOlY8p9PM2SB5h
8Ku388FepmVWcCTZiG/xj5xSMtbhLJLHlQwX+TiMTY51Ony//UFWJZp/lBcAtXq2
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82646363422772833422138321324336369135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'facebook.bars.ufc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20884458995215564941157392745349697051424740958649564168801151321112645682175132204469807903808763384779311285590863139475920043955923661640396156216765053529707570914015570961438888707934187371867656139641744153443673414938843267567491962359856559383233684039910477500534826121716422597016363469650757379635181740200371900302106083723445434844933971833297536005425078455019700190976694586229744602191600194575650661100256900184364035296456140912174735861410371435164286093603129497668057897294043717147701550008450580060227721720321018537136358330565516799998108778335038971432216160186554735179109259358463376144121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.bars.ufc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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