*.refer.org

Issued by Gandi Standard SSL CA

About this certificate

This digital certificate with serial number 4d:5d:7b:40:6d:e2:8a:2c:68:83:00:d7:f7:8c:df:65 was issued on by GANDI SAS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.refer.org,OU=Domain Control Validated+OU=Gandi Standard Wildcard SSL

GANDI SAS

Organization: GANDI SAS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:5d:7b:40:6d:e2:8a:2c:68:83:00:d7:f7:8c:df:65
Serial Number (int): 102835939124273647062947989167134269285
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1d:7e:55:d0:20:b5:33:35:2d:de:24:4a:c4:61:4f:54:4e:94:5d:6b
AuthorityKeyId: b6:a8:ff:a2:a8:2f:d0:a6:cd:4b:b1:68:f3:e7:50:10:31:a7:79:21

Fingerprint (sha1): 35:84:54:f6:08:f6:8b:3e:64:2c:9d:25:52:8e:0f:61:a7:c0:e1:00
Fingerprint (sha256): 0e:f5:83:14:83:9e:5a:43:b8:41:73:9e:ec:76:83:b1:df:8f:89:6e:27:da:cd:06:76:f3:50:21:1e:89:9c:d9

Issuing Certificate URL: http://crt.gandi.net/GandiStandardSSLCA.crt

Revocation information

OCSP Server: http://ocsp.gandi.net
CRL Distribution Point: http://crl.gandi.net/GandiStandardSSLCA.crl

Check the revocation status for certificate *.refer.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.refer.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.refer.org
refer.org

Other certificates including the domain name refer.org

(limited to 100 certificates)
senghor.refer.org
basarpcsi.eg.refer.org
examens.refer.org
listes.cm.refer.org
*.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
senghor.refer.org
listes.cm.refer.org
examens.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
basarpcsi.eg.refer.org
www.eg.auf.org
adip.eg.refer.org
foad.refer.org
fad-damanhour.eg.refer.org
examens.refer.org
examens.refer.org
foad.refer.org
foad.refer.org
cnf-tripoli.eg.refer.org
senghor.refer.org
*.refer.org
www.eg.auf.org
mooc.refer.org
www.eg.auf.org
tg.refer.org
adip.eg.refer.org
foad.refer.org
examens.refer.org
listes.cm.refer.org
mooc.refer.org
foad.refer.org
senghor.refer.org
adip.eg.refer.org
mooc.refer.org
cnf-tripoli.eg.refer.org
www.eg.auf.org
mooc.refer.org
senghor.refer.org
www.eg.auf.org
fad-damanhour.eg.refer.org
listes.cm.refer.org
www.eg.auf.org
www.eg.auf.org
foad.refer.org
mooc.refer.org
examens.refer.org
basarpcsi.eg.refer.org
tg.refer.org
critique-mediatique.eg.refer.org
*.refer.org
basarpcsi.eg.refer.org
certificationtice102.refer.org
mooc.refer.org
basarpcsi.eg.refer.org
adip.eg.refer.org
examens.refer.org
foad.refer.org
listes.cm.refer.org
senghor.refer.org
examens.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
critique-mediatique.eg.refer.org
mooc.refer.org
tg.refer.org
examens.refer.org
*.refer.org
listes.cm.refer.org
listes.cm.refer.org
listes.cm.refer.org
adip.eg.refer.org
critique-mediatique.eg.refer.org
adip.eg.refer.org
foad.refer.org
critique-mediatique.eg.refer.org
fad-damanhour.eg.refer.org
fad-damanhour.eg.refer.org
foad.refer.org
senghor.refer.org
listes.cm.refer.org
refer.org
fad-damanhour.eg.refer.org
adip.eg.refer.org
senghor.refer.org
basarpcsi.eg.refer.org
fad-damanhour.eg.refer.org
veilleauf.refer.org
senghor.refer.org
listes.cm.refer.org
mooc.refer.org
*.refer.org
*.refer.org
basarpcsi.eg.refer.org
cnf-tripoli.eg.refer.org
critique-mediatique.eg.refer.org
www.eg.auf.org

Certificate

The complete raw certificate details for *.refer.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPKZjuxG/ykofQ1Df0b0
ZXAp2bh3PWtGwKtjlJ30LaZfSGCEZ6gu6W1v4YvnEzkFQTYWgpnruUZGOP1bfa4u
ZF4dUag8Udxrveb5gZe9N0qFxh+n+05iksoEdpqxCu2M1I2U0ugSCzcW+fCL6yhg
O2Ah7aN3HxEPtnVA5SCNMBvEveCuMi6IegLEwmYEANkAm3QIfsRKzGjjDSoGlns+
peAUohoOp+jrvgWalA0y4DFsmz/9haq5A9o+yZzvFoHUKz/iKF6uZwQNuTv1zInp
eOQzjITcOzn1OWR5g6FCFqnVI/NIZPnG9vplmHcxQHHQ6Lg+UxchZQJbgY2eTEX3
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102835939124273647062947989167134269285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GANDI SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.refer.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24862338211699763051218524718207012697346060316164204027627958226735430784565926412861877356113775918893094845073697441613895328282369307193934182148406961481894015111086983366164979603259209695529294129708780619644857837924016478123334706321380032566672364406844828245482637711712121024700326236403205432080275117602291065749505353724729756502633714729464611717680600536742590411302442678199595838246750323590499114886985269540409799856874481127767204391794349285422536846634355503675375202851078254559173870058862112989747286068475813330971548523459687198080410053541987269333033715880038083826597061007953096996801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6a8ffa2a82fd0a6cd4bb168f3e7501031a77921
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d7e55d020b533352dde244ac4614f544e945d6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.gandi.net/contracts/fr/ssl/cps/pdf/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.gandi.net/GandiStandardSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.gandi.net/GandiStandardSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.gandi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00021c5b78333e923463eb6435bdcca706c24d48118a063eeaca74becb4f0f3702d3e2e72ed811420e9a6f457da66d55372abe7e6cc86543b0604fb2c384906cd0d829d8a1f9f8135d8a86a7bd2f776ca99bcd4bd205e7435ae03a25441715285b5586796eab996706a5788ecaa671cf13dcc96b4a90af23a28e0642315a96d5eb22c27cac65071ba3b9daa333cf71c257985e81882d2bcea3303353399f393a01e38edc129a7320f616fc59d505203b891b4e3161a8fde0fd3f82fee2b838c16b44a638c84b92eb9adbb5f2965f6dcba77313cb200999dcd53c35466137ace5780bfaf8ae611056bc636a1ebb1a2dad561b5a2a2b9ff044b8a22bfb19ef5bc3d3