capacitacion.libertycolombia.com.co

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:3e:58 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=capacitacion.libertycolombia.com.co,OU=GT69096557+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3e:58
Serial Number (int): 81496
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): d1:8f:26:fa:9a:4f:5b:0a:b4:8a:c3:a7:0f:8e:a3:83:b5:96:33:50
Fingerprint (sha256): 0d:af:de:83:f9:ff:8a:cd:c2:e9:3c:da:ba:b1:92:37:6a:80:18:ca:3c:7d:1a:2b:b2:e0:10:38:8d:9b:ff:45

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate capacitacion.libertycolombia.com.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capacitacion.libertycolombia.com.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capacitacion.libertycolombia.com.co

Other certificates including the domain name libertycolombia.com.co

(limited to 100 certificates)
uat.mediedge.com
www.libertyinsurance.ie
libelula.libertycolombia.com.co
libertyseguros.com
awsuatext.libertycolombia.com.co
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
web05.libertycolombia.com.co
uat.mediedge.com
uat.mediedge.com
libelula.libertycolombia.com.co
www.libertyinsurance.ie
wls.libertycolombia.com.co
webapp.libertycolombia.com.co
capacitacion.libertycolombia.com.co
capacitacion.libertycolombia.com.co
www.libertyinsurance.ie
ws.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
web03.libertycolombia.com.co
uat.mediedge.com
libelula.libertycolombia.com.co
www.libertyinsurance.ie
web03.libertycolombia.com.co
webssl.libertycolombia.com.co
wlsnonprod.libertycolombia.com.co
webssl.libertycolombia.com.co
pymes.libertyseguros.co
pymes.libertyseguros.co
uat.mediedge.com
uat.mediedge.com
wlsuat.libertycolombia.com.co
webmail.libertycolombia.com.co
web02.libertycolombia.com.co
pymes.libertyseguros.co
libertyseguros.co
www.libertyinsurance.ie
cobogexpresswaye.libertycolombia.com.co
www.libertycolombia.com.co
www.libertyinsurance.ie
oficinaenlinea.libertyseguros.co
libelula.libertycolombia.com.co
libertycolombia.com.co
capacitacion.libertycolombia.com.co
web02.libertycolombia.com.co
www.libertyinsurance.ie
www.libertyinsurance.ie
web03.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
uat.mediedge.com
aplicaciones.libertyseguros.co
webmail.libertycolombia.com.co
web03.libertycolombia.com.co
www.libertyinsurance.ie
webmail.libertycolombia.com.co
webssl.libertycolombia.com.co
webssl2.libertycolombia.com.co
libelula.libertycolombia.com.co
www.libertyinsurance.ie
uat.mediedge.com
libertyseguros.co
www.libertyinsurance.ie
libelula.libertycolombia.com.co
wls.libertycolombia.com.co
pymes.libertyseguros.co
www.libertyseguros.co
web03.libertycolombia.com.co
www.libertyseguros.co
www.libertyinsurance.ie
www.libertyinsurance.ie
aplicaciones.libertyseguros.co
web05.libertycolombia.com.co
www.libertyinsurance.ie
act-meucotadorfrota.libertyseguros.com.br
libelula.libertycolombia.com.co
libertyseguros.com
mailcol.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
webmail.libertycolombia.com.co
webssl.libertycolombia.com.co
act-meucotadorfrota.libertyseguros.com.br
libelula.libertycolombia.com.co
uat.mediedge.com
libertycolombia.com.co
uat.mediedge.com
libertyseguros.co
libelulaapp.libertycolombia.com.co
uat.mediedge.com
www.libertyinsurance.ie
connectapp.libertyqa.pt
wsqa.libertycolombia.com.co
webapp.libertycolombia.com.co
wsqa.libertycolombia.com.co
webmail.libertycolombia.com.co
web03.libertycolombia.com.co
web02.libertycolombia.com.co
web02.libertycolombia.com.co
uat.mediedge.com
web02.libertycolombia.com.co

Certificate

The complete raw certificate details for capacitacion.libertycolombia.com.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bjapR/Ij9tvD393sH6i
u3gnvBSEZzavv+9zyyJtVKIRMUG6mfweCrUwimI4WZjE+xZSUJKDbZg2C1MMDYrt
c084iez7iM5Sk2njzc2FKFcTUBewJstSBUawfcf8I5KfcKqi8egCQJFyASXiGuhw
9wJ7FHbOzDaf0KNXY5RHsvm+cx03WQWi+H/aIPIPf8s49kt6gqp8tWCSi9+x9TgV
rzadALGivOB0XreZ3nbpT5bHGOcEW3w8qBF+dyvMbX6voSpfRQhRNy5cauNjpiFs
gk5N8nsLmrYP2Rd+yGcQqrNq+DPgr/u6g5bmLeMJkerF8vl+6aaOxsz4rd+Yy6gy
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-03 17:30:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 07:46:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT69096557'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capacitacion.libertycolombia.com.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26979913903042687830911142684142856399022349423747333928869890978078689408884248236333277283604990789361564030626777720350167044167007591383806137433897321738894896894356275329336975799362901755382869735651786853066733234628776508860949872128589023299076888002040567334080317923227834611328331206626567131434306289755937012228178800271895281714443098673447160153803957157600535219187151121464829052262321105072875484511938827320965410567380858566279326219100480730211649947088031592219710293456950623687797089752220845645932546329787385206008349050124890815250890265361391280174818360641306204315620400382909830673031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacitacion.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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