gennessa.fr.to

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 39:21:76:6d:4d:ed:04:33:a7:29:0d:f2:1f:b4:37:d7 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gennessa.fr.to

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:21:76:6d:4d:ed:04:33:a7:29:0d:f2:1f:b4:37:d7
Serial Number (int): 75939743540391680036968622942711986135
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 2c:11:72:0d:85:a3:38:a7:e1:7a:25:d4:d2:69:99:22:16:a7:a6:50
Fingerprint (sha256): 01:c4:b1:63:a6:88:99:5f:80:fa:1b:ea:c3:d3:0c:cc:4b:85:49:01:c2:f8:e1:30:53:e7:c3:49:8b:e2:9e:ef

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate gennessa.fr.to

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gennessa.fr.to

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gennessa.fr.to

Other certificates including the domain name fr.to

(limited to 100 certificates)
theo.fr.to
doudz.fr.to
my.fr.to
gennessa.fr.to
lihsa.fr.to
personal.fr.to
pret.paste.fr.to
neoapp.fr.to
aggielist.fr.to
cartes3d.changeip.net
etflow.cf
icifab.fr.to
lilith.snag.fr.to
tsx2.fr.to
link.fr.to
canada-post.fr.to
mickvangelderen.nl
vt.fr.to
brunelli.synology.me
cyber.fr.to
soft.fr.to
sport.fr.to
newspaper.fr.to
paris-cdr.fr.to
wiki.fr.to
www.amzn.fr.to
theo.fr.to
pavan.fr.to
dedibox.fr.to
olly.fr.to
brunelli.synology.me
wiki.fr.to
security.cf.fr.to
long.fr.to
reangd.fr.to
ici.fr.to
aaxlss.dev
neoapp.fr.to
aggielist.fr.to
personal.fr.to
tsx2.fr.to
freeyt.fr.to
bvcuixp.fr.to
my.fr.to
delhaye.fr.to
oi.fr.to
paste.fr.to
olly.fr.to
bcuirew.fr.to
myswan.net
yurrinna.fr.to
dedibox.fr.to
algerieinfo.news80.org
service-aide-client.fr.to
pavan.fr.to
cartes3d.changeip.net
tsx2.fr.to
ist-rbt.fr.to
doublerobux.xyz
amzn.fr.to
bvcioutrw.fr.to
barrinna.fr.to
paste.fr.to
tsx2.fr.to
forest.fr.to
kanap.fr.to
gerfin.fr.to
mcloud.fr.to
git.theo.fr.to
ca.fr.to
nbciotw.fr.to
bels.fr.to
shyked.fr
hwywh.dyndns-server.com
management.tr.fr.to
lily.fr.to
harry.fr.to
neoapp.fr.to
bvcioper.fr.to
sec.adhara.fr.to
paste.fr.to
ro07.fr.to
ziko-trading-bot.fr.to
unklow.cf.fr.to
ist-rbt.fr.to
bvcuixp.fr.to
ca.fr.to
ist-rbt.fr.to
seb.fr.to
www.personal.fr.to
mintaka.fr.to
mathexplain.fr.to
smail.fr.to
takkyserver.fr.to
service-aide-client.fr.to
service-aide-client.fr.to
domyros.fr.to
uladera.fr.to
doudz.fr.to
harry.fr.to

Certificate

The complete raw certificate details for gennessa.fr.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri9EHwO20KYFFBJZHHdR
CMjv4D5GM7AoSy1zpcelOejuR6X32ujMBWnRp8zwUElrmjuZ7v3zDhfwaEAyFz1X
JL2LBlmwoWFvBwgcPaXSJPWCqNKGaD7ttfTOSbLhd1p7YgtJK4hrEVAcx3fmVT1D
fdHUeV67qxZxmQEUxIn6QGn/Mh6FI3/6CsYtMB73vceDUPK4bHRsZjvkmGNn1ab3
NNVxSGJlX6WxjbLwZI5wlUji1gVOl1w6KP3Svs1B+ZNlglLgARILOaQnuu2xtFN2
WXCSPXBtsuxIqj+GRweHU+UrYUVgNBILb/+GweuFx3ZHQh3ra0ULGyDlgR7sbc/j
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75939743540391680036968622942711986135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 08:25:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 08:25:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gennessa.fr.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21988772845831159408600583499999826424251506736026249621499937596313229709833101629431503294419892949048316489302148873608963844465137753646389946967170864807314866623192779676446714229527513203025485396016539605525824877028775533748312636460507559736750399553066380040854576036366489261292321145480806643898612616172656581559614365847642026808502501866488178976849200505940668129802450837006701222361949742161315889621754947360001805657279956208492814337634164180800371712445479693025300216718391040086679715084369911420611629093906141789383720835245863276415336949739492802001615551690424485196889965890887010476957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gennessa.fr.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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