www.optiontown.com

- Optiontown, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3d:d1:5b:83:12:07:70:8b:d1:68:80:a3:51:0a:00:b2 was issued on by GeoTrust Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Optiontown, Inc.

Organization: Optiontown, Inc.
State / Province: Massachusetts
Locality: Norwood
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:d1:5b:83:12:07:70:8b:d1:68:80:a3:51:0a:00:b2
Serial Number (int): 82169953870056593033886381641625632946
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 23:24:40:2a:3e:71:b0:dc:33:85:c5:de:c2:5d:a5:be:b9:27:35:18
Fingerprint (sha256): 04:7f:88:9e:e8:d3:fc:b5:ea:1d:e0:b0:fb:5b:50:1b:a8:aa:d2:57:1f:d7:01:80:1b:4e:1a:89:a8:3f:77:16

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.optiontown.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.optiontown.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upgrade.airasia.com
option-pass.com
extras.omanair.com
www.optionpass.in
optionpass.in
vistara.optiontown.com
britishairways.optiontown.com
www.britishairways.optiontown.com
egyptair.optiontown.com
www.vistara.optiontown.com
volaris.optiontown.com
vietnamairlines.optiontown.com
biman-airlines.optiontown.com
inselair.optiontown.com
www.optiontown.com
optiontown.com

Other certificates including the domain name optiontown.com

(limited to 100 certificates)
www.optiontown.com
rwandair.optiontown.com
airnamibia.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
*.optiontown.com
www.optiontown.com
www.optiontown.com
optiontown.com
www.optiontown.com
www.optiontown.com
career.optiontown.com
cpcontacts.optiontown.com
airnamibia.optiontown.com
ethiopianairlines.optiontown.com
www.optiontown.com
webdisk.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
*.optiontown.com
www.optiontown.com
www.optiontown.com
*.optiontown.com
fp.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
rj.optiontown.com
www.optiontown.com
webdisk.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
airnamibia.optiontown.com
cpcontacts.optiontown.com
www.optiontown.com
www.optiontown.com
cpcontacts.optiontown.com
optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
*.optiontown.com
*.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
fp2.optiontown.com
www.test.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com
www.optiontown.com

Certificate

The complete raw certificate details for www.optiontown.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/o3j/cf+Xlpj0EKvSn7f
Fv1Ksszng8R0Z0jPRCOuvZ4svzgU63wZLtcz+GV9UJdxoQs3SihibBhp772WWKpW
pYwFPS14KFIL7zH9jgE6w/UKDFQ4ACuSFlsb9rMRLBHc279MmitpE3bp0AiCZ8zF
GCHDnHluhyGQOQRiyG/PvOR0FZTGEXwqq5XitrgBMfQQOkT+Cbbu9/EWH0ApUekS
KT9JbJRrotKadYW4n8M0hoKJUhhgQcTvhiS4RUI5Btf3n6Lf7txEkaiHLxN8bQVr
M8i5vc6MLSWXVmFctQ0IVVpSUPMhHTFHB58I9W6moYYM5qsn0TduSdfB35CEXj1i
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82169953870056593033886381641625632946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Norwood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Optiontown, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.optiontown.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32134498319647146204740708824044447742760566994098033790566028335147823085850634118470370299841652759334106719400299255243521439906726397811496319432815565212114957548095894702443075814440468815839288173059452167057309443368597885755145248189438548564602051827119935462769379692737402475314286996018852039383860349840128292771419189846129149452434597605453187867492051564288594781832100295963725854592267979283205515963140591249291134269739087221055320798292332464207945610710753733896070712645287467934478917153784779196837393967073032572149109655907214043321002986497674497932503072936966210015758607871047219634937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgrade.airasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'option-pass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extras.omanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optionpass.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optionpass.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistara.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishairways.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.britishairways.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptair.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistara.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaris.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamairlines.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biman-airlines.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inselair.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optiontown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiontown.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003ec38cf4c642260002875cb99b863f9e2505336850e62cd9d6237e32c051b8f3dd0e7ff12eb721b9756ad8a93f343fcc77251f755de85ff08a55d74a179d750857c8051faef71942cebf6384d7e48babe7dc4a63107f9a5ac51e4a41458fa3250e83c941512594fbf28ab9cceb03692a5fab7eec75bfe45827e87cda6fcf893e9ba2754670319e46bb0246cccac91782d813f7929ea608632fdf50f11286739570aac14c7a2dfadacc0b011e12b521b75c01a0fc626f8e722b3348f24b1c65d6673ddd3c4ba21bdbc07d57b4e1bee4e4cf78e7a01b97e0c8df47848ffbcdd582717ce8f96d60e16fb4a31c250ba55774c3738b31834239ba8d1a7f8df356359