host6.cruzio.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 0a:70:99:83:de:65:91:37:0e:a7:bc:38:3d:fa:94:d2 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=host6.cruzio.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:70:99:83:de:65:91:37:0e:a7:bc:38:3d:fa:94:d2
Serial Number (int): 13876930862392166944523217418894087378
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 9d:1e:b2:cf:23:62:d9:59:c1:1a:3d:29:51:50:fd:47:89:36:62:19
Fingerprint (sha256): 0d:35:c9:dc:22:f3:94:c3:8d:a7:34:61:bd:97:7f:bb:1a:29:eb:72:72:31:23:8c:9b:22:47:cb:86:90:64:6b

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate host6.cruzio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for host6.cruzio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

host6.cruzio.com

Other certificates including the domain name cruzio.com

(limited to 100 certificates)
host4.cruzio.com
host9.cruzio.com
cruziomail.cruzio.com
members.cruzio.com
host8.cruzio.com
secure.cruzio.com
host3.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
www8.cruzio.com
host1.cruzio.com
host10.cruzio.com
cruziomail.cruzio.com
www6.cruzio.com
secure.cruzio.com
tools.cruzio.com
tools.cruzio.com
portal.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
host6.cruzio.com
secure.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
www10.cruzio.com
mail.cruzio.com
host9.cruzio.com
host1.cruzio.com
cruzio.com
host3.cruzio.com
members.cruzio.com
host10.cruzio.com
host1.cruzio.com
www4.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
www3.cruzio.com
host11.cruzio.com
host7.cruzio.com
host1.cruzio.com
nagios.cruzio.com
www5.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
host12.cruzio.com
host10.cruzio.com
host10.cruzio.com
tools.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
www7.cruzio.com
host1.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
portal.cruzio.com
www7.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
host8.cruzio.com
www10.cruzio.com
www15.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www12.cruzio.com
quartz.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www5.cruzio.com
www.cruzio.com
host9.cruzio.com
quartz.cruzio.com
host9.cruzio.com
host11.cruzio.com
cruziomail.cruzio.com
www8.cruzio.com
secure.cruzio.com
mail.cruzio.com
www4.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
cruziomail.cruzio.com
secure.cruzio.com
amail.cruzio.com
mail.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
quartz.cruzio.com
wwwsb1.cruzio.com
www7.cruzio.com
www8.cruzio.com
host10.cruzio.com

Certificate

The complete raw certificate details for host6.cruzio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBAl8vsJHvKs7b1MnaTg
+SKY4tNlrzgpgW4qY4MbINh3Fle3isfARvuylDleeddjrjOlJNTAPo5m/ZremY/U
pk9C/3gqbr6No+adPIALa9LenExgAXsJ9E6fQVphYzqdfD+jVV8GuXlNdkn4ioN2
sPFVBRSJfqOmMFaX6B6dZrYfolwxDWKdtl0yA8HY6NAOdgRyad363u+FVSr4gjnk
8U5aYGR9lFMwOdqPGG0i6y11jO0K3EmpbS3esvNQNrNcnM6s0NdWio/Awpq16/98
TxedxzzOj9icA2X4Ql9TjgpOhGwmziJ6qrMXKduZ+Ekz1eCqMYEa7CrTpM+ndpnx
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13876930862392166944523217418894087378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'host6.cruzio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23235811107111539626691556899353834155658948588124675007822112127975241095186539335508819009049475225399129080392624740993203181291971331421195702971343264379143496183487975207715420788180507338255671948496742274075648014465965956123728743171150726358729786326188453223770493260648311200535900862863227505129374749602248863173945042506715489350829840398607343500123844546429037102075542126634294363299801811349807071907588816510555286290666569156491432863086644177125953673796084926826867073879281151775608586080628719900282234630412513762001700366275562886942774796691788262303428180311486229227097257417745725256159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host6.cruzio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156c88c8ac40000040300473045022100d4c77c1ad96f2b09ba3049845a9e9beeaae6d431cc5be815ff80bdc4376713b302204544bdcedf4a768dda8982693f735fb45c0168ad6f6b2c6ba0cd19134ae2251c007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156c88c8c150000040300483046022100ae0fb761ed51342799686587e2297c8e1ea26654c10edbe78c531538ea2cd24c0221009316ba6e2c0273fe145857e42dc7de1a4ce0be5cf363b03beb910c1f6a91d54d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040da6fc931c0bc2328a6bf62e7591ab9e2e200ebd356037c1a1da81825123f3ccf07fe97d181de9a0e4de5a6a16e33bd2f5ded44bda24e9c28a55d6e84c4bd014ed62110161405f6f6ee42660bbe956a996026c694aea80faf94fd5febb3e2eab5a8a7782616be7ffbf6f16112672c3fe3c6ca65d0f507adaa67b5e5e473fb823bf6ca9cd6ff101fc8eb0d3c06ea35425a16cbf75e236e9ec250b5e83e01692ce9718d225b9e35c0456df58d382d0a0792950fc16976ec925818591948807cbfef4da92fb187c02a765a0609dcc4d93f38b1f15e2d5140208a9a79c8c515772765b1813928e143dcbfe13b1778d53148f65825b77866a7bd6d5ba61a93f46983