bbtest.net

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 76:8a:7d:0d:a7:6c:35:ae:f7:f1:05:15:c1:28:8f:5f was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=bbtest.net

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:8a:7d:0d:a7:6c:35:ae:f7:f1:05:15:c1:28:8f:5f
Serial Number (int): 157567976852079262501331957861308731231
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 9e:37:1b:40:0b:d6:b7:ce:90:bb:0b:79:20:c0:70:f3:de:38:27:af
Fingerprint (sha256): 06:9f:e1:a9:21:9f:7e:9f:1d:71:1d:b7:81:b2:29:83:06:be:f5:27:f4:06:2a:19:83:5e:50:1f:32:a5:84:2d

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate bbtest.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbtest.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbtest.net
www.bbtest.net

Other certificates including the domain name bbtest.net

(limited to 100 certificates)
www.bbtest.net
evenevsha1汉字-1.bbtest.net
bbtest.net
bbtest.net
ssevchangecn.bbtest.net
UYse1vl.ATT_PROD.www.bbtest.net
?.bbtest.net
8Dec-prerelrenEV2.bbtest.net
jimmy.bbtest.net
www.bbtest.net
eccre.bbtest.net
bbtest.net
s9qSVMhN.bbtest.net
ptnr-pki-ws.bbtest.net
authapi8.bbtest.net
*.bbtest.net
renew1.bbtest.net
ssltest21.bbtest.net
*.bbtest.net
ssltest9.bbtest.net
bbtest.net
PTNR-MSSL-ADMIN.BBTEST.NET
bbtest.net
symc-pc2-enroll.symclab.net
漢字QtvBCW72.bbtest.net
dev-pki-est.symclab.net
msslmy.www.bbtest.net
565654.bbtest.net
?.bbtest.net
dev-pki-cbo.bbtest.net
alex2012.bbtest.net
joetestcustomfld.bbtest.net
pv-enterprise-ssl-adminmanager.websecurity.symclab.net
bryancicauto.bbtest.net
70h3n209em.bbtest.net
dev-mmadmin-manager.bbtest.net
Sep14ProdTest2.bbtest.net
vicy.www.bbtest.net
pv-testdrive-pki-idp.symclab.net
pv-userservices-auth.vip.symclab.com
mmadmin1-enroll.bbtest.net
bt-testdrive-pki-idp.bbtest.net
pv-mmadmin.bbtest.net
ft-ent-admin.bbtest.net
xofUVdb.www.bbtest.net
ptnr-vipservices-auth.bbtest.net
mnigudkar-vlabs.bbtest.net
authmail4.bbtest.net
25Aug201701.bbtest.net
oneyear2.bbtest.net
?.bbtest.net
standdsa.bbtest.net
ft-pki-internal-svc.symclab.com
漢字replace.bbtest.net
ptnr-authentication.bbtest.net
bbtest.net
24JULPRODEVVICE1.BBTEST.NET
trustblade.bbtest.net
ev34.bbtest.net
dev-trustcenter-enterprise1.websecurity.symclab.net
T0BEsAZda_b.bbtest.net
?.bbtest.net
server1.bbtest.net
pki-idp.symclab.net
SHA1.test01.bbtest.net
ssp.gqa.vip.symc.io
mmadmin10-manager.bbtest.net
ptnr-pki-idp.symclab.com
j1yau98.bbtest.net
?.bbtest.net
ssltest30.bbtest.net
certmanager5.websecurity.symclab.net
SjKElDRJ12.bbtest.net
ssltest27.bbtest.net
ft-vip-fin.bbtest.net
dHGsxJb.www.bbtest.net
?.bbtest.net
?.?.bbtest.net
ft.m.vip.symclab.com
dev-vsc.ws.symclab.com
dev-testdrive-pki-idp.bbtest.net
ft-ent-admin-enroll.bbtest.net
?.bbtest.net
ft-ent-control.bbtest.net
dev-pc1-ocsp.symclab.net
?.bbtest.net
bbtest.net
idc-cic-sso.symclab.net
ft-vsc.bbtest.net
?.bbtest.net
ssltest21.bbtest.net
final14-3sevv1汉字.bbtest.net
bbtest.net
*.bbtest.net
testing1.bbtest.net
ptnr-enterprise-ssl-admin.jp.websecurity.symclab.com
ptnr-sso.websecurity.symclab.com
pki-cmp.symclab.net
asb1-mpi-ise-2.net.bbtest.net
?.bbtest.net

Certificate

The complete raw certificate details for bbtest.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCYC/p4Qjlkr6XyUVhtA
uGQlKOyTwYk3d5VaeQjckxkkgHkPbEGotKqnCOmf7fUq61fOhIcHjK9NjR45DAfm
DfKmm5nzsrNnJa/Pdf1DFVMDfKReBXl9ob+fBLk2MMqRA4pQ5GNf7E+EglTnbpIc
eul+K7Yz5t+YtItE5wiVuzbASLP7wrnMSSmIdgS/WyjDRNaAhiLVXovvmImVkbhE
OXv0IiicB3Q8GIDV4CXI1iLTJxgcwmnHEANjfFLZzTHU4/LyRDf9zDpIvcqoUXBU
Y0BzeKD0DB8JijrXW5WbwjKZ8sqFvrcjvXLTRf6XWCtnlXGEdvMcovA8DiayATwc
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157567976852079262501331957861308731231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bbtest.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22236685940747799337742557533769408769406652176672686265012385318582905204328301335115413533579915921187316566255606452569323364066057576784414701488433180421304203354423093002512618314559914685803043064984482182786930507190606571167369872632127265305396097549571911181594968375033755236249061990594872884503175438161155406407526706661855065369900618467548019989558370163356867212573739638397136176121072208459901441179898502078143566974340793235935359189959099409684651660168287983773711934086054257956955371418699435795828762177480147002186470476938766017905651452134546923327115143967272798403119287901766557637787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbtest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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