www.postilokero.net

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:30:27 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.postilokero.net,OU=GT62078106+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:30:27
Serial Number (int): 77863
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 41:eb:3c:f7:d1:1f:60:2f:88:87:1d:d9:80:c0:c1:03:a7:aa:9d:59
Fingerprint (sha256): 0c:a2:83:9f:60:d6:fe:08:96:e8:77:01:45:1a:e9:d5:dd:30:6f:b6:0c:d5:15:84:99:55:80:08:75:50:0b:b6

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.postilokero.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.postilokero.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.postilokero.net
postilokero.net

Other certificates including the domain name postilokero.net

(limited to 100 certificates)
closeprotection.fi
realtrex.net
xn--jrjestyksenvalvoja-ltb.fi
finsecpro.net
postilokero.net
yritysturvallisuus.fi
kirjanpitaja.fi
kirjanpitaja.fi
realtrex.net
yritysturvallisuus.fi
closeprotection.fi
highskill.fi
finsecpro.net
www.postilokero.net
mitamukaanlennolle.fi
realtrex.net
kirjanpitaja.fi
mail.highskill.fi
kirjanpitaja.postilokero.net
postilokero.net
xn--jrjestyksenvalvoja-ltb.fi
swversion.fi
dojo.postilokero.net
highskill.fi
*.quellevarparaelvuelo.es
xn--jrjestyksenvalvoja-ltb.fi
mail.highskill.fi
highskill.fi
highskill.fi
mitamukaanlennolle.postilokero.net
postilokero.net
finsecpro.net
closeprotection.fi
swversion.fi
swversion.postilokero.net
mail.yritysturvallisuus.fi
mitamukaanlennolle.fi
closeprotection.fi
realtrex.net
mitamukaanlennolle.fi
postilokero.net
mitamukaanlennolle.fi
swversion.fi
www.highskill.postilokero.net
mitamukaanlennolle.fi
yritysturvallisuus.fi
mitamukaanlennolle.fi
mitamukaanlennolle.postilokero.net
postilokero.net
postilokero.net
swversion.fi
highskill.fi
finsecpro.net
finsecpro.net
*.highskill.fi
yritysturvallisuus.postilokero.net
highskill.fi
yritysturvallisuus.postilokero.net
finsecpro.net
dojo.postilokero.net
mail.highskill.fi
realtrex.net
mitamukaanlennolle.fi
swversion.fi
postilokero.net
kirjanpitaja.fi
postilokero.net
mitamukaanlennolle.fi
finsecpro.net
finsecpro.net
highskill.postilokero.net
highskill.fi
mitamukaanlennolle.fi
mitamukaanlennolle.fi
mitamukaanlennolle.fi
www.postilokero.net
kirjanpitaja.fi
closeprotection.fi
yritysturvallisuus.fi
kirjanpitaja.fi
mail.yritysturvallisuus.fi
yritysturvallisuus.fi
*.highskill.fi
xn--jrjestyksenvalvoja-ltb.fi
swversion.fi
yritysturvallisuus.fi
finsecpro.net
kirjanpitaja.fi
kirjanpitaja.fi
closeprotection.fi
realtrex.net
finsecpro.net
yritysturvallisuus.fi
kirjanpitaja.fi
postilokero.net
mitamukaanlennolle.fi
realtrex.net
mitamukaanlennolle.fi
mitamukaanlennolle.fi
xn--jrjestyksenvalvoja-ltb.fi

Certificate

The complete raw certificate details for www.postilokero.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpX6Qve3Y6pKYWoh1v5c
NDnrWCVjpCdf3oeuMxcKHcyeWR45rvkqp2nqD1nAqFY94Q+eYhy5I3PMrpovxUwK
KKqqDjTGBQlk528UFVu39cx7lJZzC9l1M8DfmCRoGJqrYzuc/ibF0KNav/G+6f5z
vQyZw3oRL0pxpVqfu9BthkyXvBFaQyx+VHerclpbiVrX4MpG4R9WciifdcVcWfmy
Ey1pWkwV5BHFahjJz5btiNCmCLtHHWjykhkM1+QDfXgoW7tX5Rb5beUcpiRf/73g
Pb2CWGIE4Hq+eUo14bRXrYNlGvIzkPdzxnTrK7P7eOPYg0EpDB4Ag7nojCyphMon
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-26 12:33:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-27 23:45:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT62078106'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.postilokero.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26079047526252734576510222795702535088544440453742923629564990873176349863101995548603162756334057623492928151220944954844338184459332236249402913095264579549478485191458271231179883045968870358878685371689648233599823257451262070646191954932691709993522011609640754019582262327990311185873964448065712064423077906495229295742998249049464274714282774542923899493870868864501319339451367577323511973233545613657826381333706154874760518102756609478693697189547659210756127621118514179053300327917615761188746001084423593982314751666801600080296609276622634880701983965284633487869646026002311696951028961867276644657101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postilokero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postilokero.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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