*.colonynetworks.com

- Colony Networks Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:da:39 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Colony Networks Inc.

Company registration number: aQi5nPHMTwThAjnGGUmFt9Fu9Xk5JI7/
Organization: Colony Networks Inc.
Organization unit: Server Group
State / Province: British Columbia
Locality: Vancouver
Country: CA

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:da:39
Serial Number (int): 186937
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: ec:c0:2b:59:0c:6b:3e:50:ce:d2:7e:9e:7e:09:0d:86:95:e3:ea:6e
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 7c:12:c8:6b:fd:72:df:36:f0:52:11:85:91:e5:5b:12:12:b2:b1:06
Fingerprint (sha256): 0a:90:97:25:36:4a:ba:34:ad:b0:f9:72:2a:fb:05:9b:98:b8:6c:1a:83:7e:e7:03:5e:4a:1d:01:86:cc:28:44

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate *.colonynetworks.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.colonynetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.colonynetworks.com
colonynetworks.com

Other certificates including the domain name colonynetworks.com

(limited to 100 certificates)
colonynetworks.com
www.app.coupocket.com
rogers.go.colonynetworks.com
secure.colonynetworks.com
go-rogers.colonynetworks.com
rogers.colonynetworks.com
royallahaina.expressbook.io
play.adeptly.ai
*.colonynetworks.com
aprendiendo.app
www.indiadecides.app
nalu.app
uy.pronto.com.uy
support.colonynetworks.com
support.colonynetworks.com
colonynetworks.com
static.lolsquare.com
www.abcmedicinals.com
rogers-alpha.go.colonynetworks.com
colony-dev.go.colonynetworks.com
killingxboredom.com
chatcenter.ai
support.colonynetworks.com
support.colonynetworks.com
thisisoriflame.com
4starsschools.com
secure.colonynetworks.com
ahmednafies.com
colonynetworks.com
rfa.telico.cloud
www.klnr.app
www.stockeralerts.com
admin.colonynetworks.com
www.sanbeaman.com
www.zimage.app
app.codingbar.ai
www.sierrainsights.com
rogers-alpha.go.colonynetworks.com
mineapp.com.br
internal-admin-dev.colonynetworks.com
upsquared.com
www.ampledesigns.co.in
lights.superpads.app
phovo.co
support.colonynetworks.com
www.auto-techpro.com
colony-alpha.go.colonynetworks.com
dnd-schulsprecher.cf
johnsontech.co.uk
support.colonynetworks.com
dsar.redacted.ai
www.9plums.com
debuth.com
dias-art.ch
guest.colonynetworks.com
colonynetworks.com
www.ivonakov.info
omhkem.club
www.arnventures.co.ke
cloudone.colonynetworks.com
*.colonynetworks.com
business.dealbase.app
*.colonynetworks.com
egov.co.za
msfi.in
gd.cns.net.tw
stage.merchant.zipeli.com
kamytech.com
guest.colonynetworks.com
www.colonynetworks.com
zeh.arq.br
support.nushusociety.com
globalmaule.cl
*.colonynetworks.com
o.collageofficial.com
www.homepageda.com
www.diftg.co
app.mikisgym.com
customcalculator.app
mistercarseminovos.com.br
www.iamhcmc.app
www.anandkj.ml
rogers-alpha.colonynetworks.com
test.app.konch.ai
thomasbrosgreatwall.com.au
www.nktr.app
4starsschools.com
greenwooddevelopmentnj.com
colony.go.colonynetworks.com
app.bundleofsage.com
admin.colonynetworks.com
davidgalph.com
akai.app
www.vicpoolcomplianceinspections.com.au
buddywritings.com
saml.colonynetworks.com
guest.colonynetworks.com
royallahaina.expressbook.io
dlink.tamdiem247.com
xoxomensfashion.com

Certificate

The complete raw certificate details for *.colonynetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE44oD5FgFSWYkVInQZv
srBsdJRuNcsOwN94Lo553faz3Tlo5W2LhF1RzeL3TdNUgJ+OF+w9buQamltdZBiT
v/l7pakwvYvi2Lr1yCuYlvupwYiZlYWO+ySbnjIfhTqBkMxh7FfNOOesToDn1U1S
OfB4axoPaEn4ecCqcGdvB7INISnVXiPNwyXOeJ+HHPw7VTL+ICYcbFUeDn+dmDn5
o9LUrqQ34z++6XTSNJYo77Hscl7anH+PJ8z4BjMnLZL3X+xlp/Ma/hPu8DOgNvcC
cD6DYx0x5JczfpGqYBDvMHz2wU/TmvnBbZIXkoi9dFDUWEIB2IjIH/6TNBMZJUUP
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-26 18:20:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-19 07:01:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aQi5nPHMTwThAjnGGUmFt9Fu9Xk5JI7/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colony Networks Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.colonynetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21246607543220135891069548713720284253163810643444620984867069801891330309057683652267491069631190011507227586001001286407441925466844401343924027878755288325114952062538142112853990995405324782730957778901071114308163970378286288215665930914083905290773027510671024799048579809095856574760542151171719102790736374016451820645964773527055651297208941703536661766056466876526716501035673581128572539287373072424566910812727321844205406515601263980761185063241285272751500603631007359465296150880346135420736530849953635312558369474019005046232027149920463428626975301644694032729330619788409358840280842881622836842473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colonynetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonynetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecc02b590c6b3e50ced27e9e7e090d8695e3ea6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ea1e5476a71f8e0f6ae9824c6af5c8af2ddf25b740c020e75b61e2bd8f6109ba47bfaad00e60a9f13b3e4dd515ea12837aaaa8afc5a914feb09730112f8eaba389e37b314be5ce4541209323b05ecf4e7a70c23650f954aca3986fdcfc29501255e2e332b423e432ac322d274fbe7c708ec4d890bd99f73620b995d954da547668663cee156d0e5dfa3094ce5a4c05bc7d465978810866e014cdcb35fe49162489bf6becc0119df64f2668fcbfd05e183fc0c81f3ea8e9d91b1dfe1613dfdf858979669437b9c742b23eecd47e0562805349d04e601181fea793f170fc97f2f40f98f6331aa686683229ee536ca45e285fcabec385f60683b7a15b82b9a4efd