labs.f-secure.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:9e:db:e3:38:2e:3c:ca:ca:4a:30:a0:73:f1:cf:42 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=labs.f-secure.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:9e:db:e3:38:2e:3c:ca:ca:4a:30:a0:73:f1:cf:42
Serial Number (int): 7470982732456230804159720372229492546
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3e:c2:a4:ae:0a:21:7b:13:39:70:b2:22:bb:a9:d8:59:fe:fa:a5:72
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 5f:40:00:20:ca:e2:7b:65:24:5b:13:e5:c9:1b:f6:4c:6f:49:d0:76
Fingerprint (sha256): 04:07:56:c7:ef:29:b7:a8:3c:40:6a:3f:12:9c:15:85:52:44:1a:cd:63:32:ab:d1:bf:5a:b2:d1:4f:f6:e2:19

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate labs.f-secure.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for labs.f-secure.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

labs.f-secure.com
labs.mwrinfosecurity.com

Other certificates including the domain name f-secure.com

(limited to 100 certificates)
oneid.btinteg.ob.f-secure.com
fsio-d4eb-test.sp.f-secure.com
avain-tp.sp.f-secure.com
eu1.analytics.psb.f-secure.com
FSMSG0265.sp.f-secure.com
*.679.tp.cloud.f-secure.com
spi-tp.sp.f-secure.com
digital-life-test.f-secure.com
spi.f-secure.com
portal.radar.f-secure.com
internal-dev.connect.withsecure.com
services.sp.f-secure.com
ew1-rds-be-prd-rabbitmq-03.rds.f-secure.com
fsmsg0445.sp.f-secure.com
igbackup.ob.f-secure.com
guts.sp.f-secure.com
*.679.tp.cloud.f-secure.com
fsmsg0457.sp.f-secure.com
updates-api.radar.f-secure.com
frdm-stats.nc.f-secure.com
en.riws.status.ricoh.com
cgi.f-secure.com
helrdomaster02.fi.f-secure.com
fsmsg0757.sp.f-secure.com
se1gpgw01.f-secure.com
vivo.ob.f-secure.com
obus.sp.f-secure.com
scl.partners.f-secure.com
splunk.ci.infra-services.f-secure.com
fsmsg0071.sp.f-secure.com
*.safeavenue.f-secure.com
akamaisecure2.qualtrics.com
FSMSG0353.sp.f-secure.com
reliance-portal.sp.f-secure.com
secure05.stage.lithium.com
fsmsg0233.sp.f-secure.com
api.elements.f-secure.com
secure01.lithium.com
sebereports.sp.f-secure.com
fsmsg0031.sp.f-secure.com
freedome.f-secure.com
telia-portal.sp.f-secure.com
tsf-portal.sp.f-secure.com
beta.f-secure.com
uk.safeandsavvy.f-secure.com
*.smi.sp.f-secure.com
noms2.sp.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
partnerportal.f-secure.com
FSMSG0259.sp.f-secure.com
www.backup.f-secureusa.com
fsmsg0121.sp.f-secure.com
movistar.pa.ob.f-secure.com
psb-live.sp.f-secure.com
test.www.europe.f-secure.com
ew1-rds-be-prd-rabbitmq-04.rds.f-secure.com
stg-download.f-secure.com
vip.f-secure.com
emea.psb.f-secure.com
msp-int.f-secure.com
researchblog.f-secure.com
mts.sp.f-secure.com
secure05.stage.lithium.com
labs.f-secure.com
mobile-dl.sp.f-secure.com
fsbwserver-pp.f-secure.com
secure01.lithium.com
f-secure.com
fsmsg0349.sp.f-secure.com
fsmsg0417.sp.f-secure.com
fsjira.f-secure.com
spi.f-secure.com
jenkins-staging.fi.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
akamai-san18.exacttarget.com
cbeyond.sp.f-secure.com
fsmsg0275.sp.f-secure.com
guts2.sp.f-secure.com
*.business.f-secure.com
fsbwserver.f-secure.com
safeavenue-tp.sp.f-secure.com
en.riws.status.ricoh.com
fsbwserver.f-secure.com
doorman.sp.f-secure.com
FSMSG0123.sp.f-secure.com
iaps-tp.sp.f-secure.com
safeavenue.f-secure.com
oh-ci.fsxt.net
redirects.f-secure.com
cgi.f-secure.com
karhu2.nsense.net
smiws-internal.sp.f-secure.com
ticket.btstaging.ob.f-secure.com
fsmsg0267.sp.f-secure.com
clp-st-gw-nl.nc.f-secure.com
hibiki.f-secure.com
location-api.f-secure.com
partnersps.f-secure.com
cgi.f-secure.com
*.fusion.f-secure.com

Certificate

The complete raw certificate details for labs.f-secure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7470982732456230804159720372229492546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'labs.f-secure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763635668870748706759886938912189120125796201823412662284443229582797795210248836504485461563557735970173851580825564288458179185697560549821757483910023759136112616605433237176638090576740901953044276350523997251101250520523334500279845615183066993549089593177379343512876010624449247219213542949892318477103138372754647126888384354131708597649442924099901502462802680685204534908335559033491750259631829918664839364013432655080836366390807503705959651920106998792502043542882654197683338009476923290838719529707396219150286698337483418119657416823653129485114740268707540285439474902940838161245898633543794474637992701280274943785269174049826870822536175017769541502687540681544112547962340114528902667739929653493106834928109790662929685758183673154034303767400717943657832117784768399580193835428706631412429669492442292147018281182643723647758799901750610242023740715582276850386089300868731881060354011811733882948234912557580339171464392499294848558644281986246143991210583560726004818697522984669310494600702760191003814691351170963741439653569403152660979208706347328891243879179332911030155052298650182626681879251474841132871336646339018316443777484678627954419968497838796492109809360462200207142303713851160877983286363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ec2a4ae0a217b133970b222bba9d859fefaa572
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.mwrinfosecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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