reciprocity.aetn.org

Issued by Network Solutions DV Server CA

About this certificate

This digital certificate with serial number f6:6c:0b:3e:98:34:4d:49:bf:ec:52:b9:2a:fc:f5:fa was issued on by Network Solutions L.L.C..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reciprocity.aetn.org,OU=Domain Control Validated+OU=nsProtect Secure Xpress

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f6:6c:0b:3e:98:34:4d:49:bf:ec:52:b9:2a:fc:f5:fa
Serial Number (int): 327551083089567732789106853669731366394
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 69:55:fc:5c:8e:a4:ea:99:14:3c:c7:5c:2c:55:69:4b:c7:af:9b:0e
AuthorityKeyId: 58:d8:25:92:a4:55:5a:6e:d9:a3:d1:a3:7c:0c:aa:04:21:71:2e:60

Fingerprint (sha1): 30:9d:83:ce:c5:c7:c0:30:eb:57:92:c3:b7:bc:96:00:82:9e:12:f5
Fingerprint (sha256): 07:ad:87:68:f0:df:ca:38:3d:43:9f:16:4e:7d:d6:2a:b6:1c:78:50:e6:61:7d:f2:01:46:00:77:3b:b5:56:41

Issuing Certificate URL: http://www.netsolssl.com/NetworkSolutionsDVServerCA.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA.crl

Check the revocation status for certificate reciprocity.aetn.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reciprocity.aetn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reciprocity.aetn.org

Other certificates including the domain name aetn.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reciprocity.aetn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIRAPZsCz6YNE1Jv+xSuSr89fowDQYJKoZIhvcNAQEFBQAw
WTELMAkGA1UEBhMCVVMxITAfBgNVBAoTGE5ldHdvcmsgU29sdXRpb25zIEwuTC5D
LjEnMCUGA1UEAxMeTmV0d29yayBTb2x1dGlvbnMgRFYgU2VydmVyIENBMB4XDTE0
MDYxMjAwMDAwMFoXDTE1MDYxMjIzNTk1OVowZDEhMB8GA1UECxMYRG9tYWluIENv
bnRyb2wgVmFsaWRhdGVkMSAwHgYDVQQLExduc1Byb3RlY3QgU2VjdXJlIFhwcmVz
czEdMBsGA1UEAxMUcmVjaXByb2NpdHkuYWV0bi5vcmcwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDdEQi4C6JulJkQxVXL88zou0laRVNJHQPyPmyTOkKf
1dzu+VYIr8tr2RxoIEx86mVqvVAsrz6ciHfIkhiP8sobyiU9nlQoX85Ba0Rm5xqr
Qzrb3F1Tqbk2gS7uofGZsmYqJEN5EIdWGTiT86rPmmTrtLt+6bDXSEzCewjx48sj
yazu5ruC7afDUTMyq3ZP/C1NtHm/B1MCuLImLhN79QlMEesAeKFaTac95VUoYQxO
64NhOXqJyhL7rDjmrgmOv8pPc00jGonV+Gorvya43a7IOyoI5CMuUuVsi5hFgZXK
eb+52FJw2GreGZzPG9L1q/O/GsnYQ5gqXzOD+5VZHnzJAgMBAAGjggHfMIIB2zAf
BgNVHSMEGDAWgBRY2CWSpFVabtmj0aN8DKoEIXEuYDAdBgNVHQ4EFgQUaVX8XI6k
6pkUPMdcLFVpS8evmw4wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdIARuMGwwYAYMKwYBBAGG
DgECAQkBMFAwTgYIKwYBBQUHAgEWQmh0dHA6Ly93d3cubmV0d29ya3NvbHV0aW9u
cy5jb20vbGVnYWwvU1NMLWxlZ2FsLXJlcG9zaXRvcnktY3BzLmpzcDAIBgZngQwB
AgEwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5uZXRzb2xzc2wuY29tL05l
dHdvcmtTb2x1dGlvbnNEVlNlcnZlckNBLmNybDB6BggrBgEFBQcBAQRuMGwwQwYI
KwYBBQUHMAKGN2h0dHA6Ly93d3cubmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRp
b25zRFZTZXJ2ZXJDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLm5ldHNv
bHNzbC5jb20wHwYDVR0RBBgwFoIUcmVjaXByb2NpdHkuYWV0bi5vcmcwDQYJKoZI
hvcNAQEFBQADggEBABfMS/Qcfmmg85gmvFu1AcilNmQzzrKBljg4HOxQT1HtDnaX
ztKCcTDhBMyK36kMbHq/pgf3HdYlVMDgF6b7Gy0hKHsFha1M2oQdrI6qyoRPJ0+j
C6+Dfzd4rD4QPZZQs0yY0xofNfa0o0fx7imzUUQCwkSikePanvqvNjBdRERw2WZo
FXr/XquuMew2Z0L0zZGa9lqzMJhje6fIcTbOs0DzQtM9WPulJub7AXj9FXy/A9Zu
tyXmbgt6uSelMmnPWVQzZdwmN5KR9JGJEyBBAjBdUrW9pIp6xzVgoY+osnqD/J8U
IMZoqv2ZVyutN5vazVsQ5xgLNzRCfbAKGPn79nY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3REIuAuibpSZEMVVy/PM
6LtJWkVTSR0D8j5skzpCn9Xc7vlWCK/La9kcaCBMfOplar1QLK8+nIh3yJIYj/LK
G8olPZ5UKF/OQWtEZucaq0M629xdU6m5NoEu7qHxmbJmKiRDeRCHVhk4k/Oqz5pk
67S7fumw10hMwnsI8ePLI8ms7ua7gu2nw1EzMqt2T/wtTbR5vwdTAriyJi4Te/UJ
TBHrAHihWk2nPeVVKGEMTuuDYTl6icoS+6w45q4Jjr/KT3NNIxqJ1fhqK78muN2u
yDsqCOQjLlLlbIuYRYGVynm/udhScNhq3hmczxvS9avzvxrJ2EOYKl8zg/uVWR58
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327551083089567732789106853669731366394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reciprocity.aetn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27907065204717043160987826670529116142372530485893337374038767988166293459268416163025052695238806004215071032368405069736682085183487698259648742824150542894342688300481565245167951320229112146787349929787999387182659837388596695627625756966020455190920252676363310227763075540957278255780237254267416640346495559712061671656138962931827390202017530447524815475622176731304422347126722563387773411655818984113369386948401374811166929575702013154860764298384353375170492854671231782772983820988176819985245493400303225826094226259353140521922148940572574503921167683574201252342590752963122688626414732714670118829257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 58d82592a4555a6ed9a3d1a37c0caa0421712e60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6955fc5c8ea4ea99143cc75c2c55694bc7af9b0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.netsolssl.com/NetworkSolutionsDVServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reciprocity.aetn.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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