prod1.uk.provenir.com

- Provenir -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 58:2b:c4:77:78:dd:59:1e:84:d9:6a:73:f6:1c:85:b3 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Provenir

Organization: Provenir
State / Province: New Jersey
Locality: Parsipanny
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:2b:c4:77:78:dd:59:1e:84:d9:6a:73:f6:1c:85:b3
Serial Number (int): 117199317211829043966709438373338842547
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 96:de:40:d5:bb:ea:ee:0c:a8:c0:df:38:d2:3b:4c:35:f3:e5:90:65
Fingerprint (sha256): 04:33:f9:85:9f:1c:40:7d:cf:72:94:43:13:b8:d3:db:b4:1c:cf:94:41:49:6f:22:6e:eb:a6:a7:c7:ca:13:5f


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate prod1.uk.provenir.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod1.uk.provenir.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod1.uk.provenir.com

Other certificates including the domain name provenir.com

(limited to 100 certificates)
sni.cloudflaressl.com
prod1.uk.provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.trolley.com.kw
blog.provenir.com
blog.provenir.com
wiki.provenir.com
provenir.com
helpdesk.stjosephsvilla.net
blog.provenir.com
ldiplusstatus.uds.lenovo.com
itsupport.provenir.com
provenir.com
blog.provenir.com
info.provenir.com
wiki.provenir.com
helpdesk.trolley.com.kw
www.provenir.com
itsupport.provenir.com
wiki.provenir.com
sni.cloudflaressl.com
glsshelpdesk.glss.net
ldiplusstatus.uds.lenovo.com
sni.cloudflaressl.com
sd.almansoori.biz
provenir.com
*.uk.provenir.com
info.provenir.com
provenir.com
provenir.com
prod1bcp.uk.provenir.com
www.provenir.com
www.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
helpdesk.lexingtonmfg.com
www.provenir.com
provenir.com
info.provenir.com
itsupport.provenir.com
provenir.com
provenir.com
facilities.realmanage.com
sni.cloudflaressl.com
blog.provenir.com
provenir.com
info.provenir.com
*.provenir.com
provenir.com
helpdesk.lexingtonmfg.com
provenir.com
mail.provenir.com
sni.cloudflaressl.com
helpdesk.stjosephsvilla.net
ldiplusstatus.uds.lenovo.com
provenir.com
provenir.com
sni.cloudflaressl.com
info.provenir.com
ldiplusstatus.uds.lenovo.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
provenir.com
*.provenir.com
sd.almansoori.biz
helpdesk.childrensinstitute.org
helpdesk.stjosephsvilla.net
provenir.com
blog.provenir.com
www.provenir.com
qa1.uk.provenir.com
blog.provenir.com
info.provenir.com
ariticpinpoint.provenir.com
info.provenir.com
helpdesk.trolley.com.kw
itsupport.provenir.com
helpdesk.trolley.com.kw
ldiplusstatus.uds.lenovo.com
helpdesk.stjosephsvilla.net
blog.provenir.com
provenir.com
helpdesk.childrensinstitute.org
blog.provenir.com
info.provenir.com
*.uk.provenir.com
provenir.com
ldiplusstatus.uds.lenovo.com
ariticpinpoint.provenir.com
sd.almansoori.biz
www.provenir.com
www.provenir.com
provenir.com
provenir.com
helpdesk.childrensinstitute.org
sni.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for prod1.uk.provenir.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIID8zCCAtugAwIBAgIQWCvEd3jdWR6E2Wpz9hyFszANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEyMDYyNTAwMDAwMFoXDTE0MDYzMDIzNTk1OVowajEL
MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxEzARBgNVBAcUClBhcnNp
cGFubnkxETAPBgNVBAoUCFByb3ZlbmlyMR4wHAYDVQQDFBVwcm9kMS51ay5wcm92
ZW5pci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M0NiaCGj
5ZB0YaCFkkgDpnrt6YWxgQW6hOkuxJlChI40Bjr9hqkagFMnvkToEUUSrPmDsU5u
7sFa2wNCiT6RBZc+8mxJRH4kmnL5+Idne1qlXEtYjs6+K5dXrhxBHrfCTLjaQ6zD
B3TeoKBp2Wg4vJKupao5oTiH40sYN84JS44WWxIDciTGjhQSyaGkbM6ZtsmVmxyw
8ZMMULpSXyUHSaGPj2w/7EwKnGflw0HzwGz1gGRZAMU/Zx21vJ3jyphiQP1NemN7
BMML3sHwqQufkQbTTE11XjDdfWQ4DpvCymfZsTvjVAEapR9X3qMxKfL1OO17gE4L
jsZC7y1MGQS9AgMBAAGjgcIwgb8wIAYDVR0RBBkwF4IVcHJvZDEudWsucHJvdmVu
aXIuY29tMAwGA1UdEwEB/wQCMAAwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL3N2
ci1vdi1jcmwudGhhd3RlLmNvbS9UaGF3dGVPVi5jcmwwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0
cDovL29jc3AudGhhd3RlLmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAY8Y7cE0I22lO
KmXzMrFaj4oGXVjiOtjG9w8F34blkEC20RctBRcYLkClS3xOoK688B+FBU59KgYq
blUtcMa6+gzpXWSA3EBwdI8E/20oebzsd7ZeHeqY9zjGPn//Ax1c38UyKDQh4jd1
mtDVGLVaDXSEkbE06k9BPvi7LGc8JrmIZ41E43HFy2MQzTM/4nI2YRCjfFl1GkXX
cjA1DqOuIaN9gihDDXqYfsCVlhcWumgGLkHaswOvXS84vXQcygPqVUbuhDyQ+Ctz
Pv0/t36/fMDOhSr5JCNzkRal/9dv20rFVfQdX2CFsn7clrjNzRf2CZGN8S9vFfqm
rtoGuxbviw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTNDYmgho+WQdGGghZJI
A6Z67emFsYEFuoTpLsSZQoSONAY6/YapGoBTJ75E6BFFEqz5g7FObu7BWtsDQok+
kQWXPvJsSUR+JJpy+fiHZ3tapVxLWI7OviuXV64cQR63wky42kOswwd03qCgadlo
OLySrqWqOaE4h+NLGDfOCUuOFlsSA3Ikxo4UEsmhpGzOmbbJlZscsPGTDFC6Ul8l
B0mhj49sP+xMCpxn5cNB88Bs9YBkWQDFP2cdtbyd48qYYkD9TXpjewTDC97B8KkL
n5EG00xNdV4w3X1kOA6bwspn2bE741QBGqUfV96jMSny9Tjte4BOC47GQu8tTBkE
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117199317211829043966709438373338842547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Parsipanny'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Provenir'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'prod1.uk.provenir.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22874412034950561598305142988678247442892404852941511056330818339075469161390387014602952722465630522600670387581758911162715029101149912133965569881547492826787618105723170207341042519914697834447204538495673535869960669491558272853868285162463267704182791636339210520781271117727950886414141396854064923534553888462850931534410663718063766324613532724848762868049848261549640703439781162197236362939952465690757484550647924970341260479109203778029049288278603926100998743132528949460087576630486939838506372452423294905555248636142381398451327886717583430716748020708861534141040236703970694411471832849824192464061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1.uk.provenir.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063c63b704d08db694e2a65f332b15a8f8a065d58e23ad8c6f70f05df86e59040b6d1172d0517182e40a54b7c4ea0aebcf01f85054e7d2a062a6e552d70c6bafa0ce95d6480dc4070748f04ff6d2879bcec77b65e1dea98f738c63e7fff031d5cdfc532283421e237759ad0d518b55a0d748491b134ea4f413ef8bb2c673c26b988678d44e371c5cb6310cd333fe272366110a37c59751a45d77230350ea3ae21a37d8228430d7a987ec095961716ba68062e41dab303af5d2f38bd741cca03ea5546ee843c90f82b733efd3fb77ebf7cc0ce852af92423739116a5ffd76fdb4ac555f41d5f6085b27edc96b8cdcd17f609918df12f6f15faa6aeda06bb16ef8b