portal.decodestudios.net

- Decode Studios Ltd -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 6e:bb:15:9a:68:1d:ae:ba:b0:02:38:e0:cd:0d:e0:21 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Decode Studios Ltd

Company registration number: 06653550
Organization: Decode Studios Ltd
Organization unit: Technical
State / Province: Derbyshire
Locality: Dronfield
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:bb:15:9a:68:1d:ae:ba:b0:02:38:e0:cd:0d:e0:21
Serial Number (int): 147186477212847787673474762202927718433
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): e8:ac:35:f6:28:5a:47:3f:d8:65:d8:ea:34:28:fe:cd:43:fa:e0:2f
Fingerprint (sha256): 10:72:38:6e:cf:b5:a3:48:e6:6a:27:46:80:9f:55:33:95:79:79:87:2d:7e:8e:e9:7e:96:f3:58:5d:11:e7:df

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate portal.decodestudios.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.decodestudios.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.decodestudios.net

Other certificates including the domain name decodestudios.net

(limited to 100 certificates)
www.decodestudios.net
portal.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
www.decodestudios.net
decodestudios.net
www.decodestudios.net
davidbunce.com
decodestudios.net
portal.decodestudios.net
billing.decodestudios.net
www.decodestudios.net
decodestudios.net
davidbunce.com
portal.decodestudios.net
www.decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
www.decodestudios.net
www.decodestudios.net
form.philly.clients.decodestudios.net
decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
chewshealth.co.uk
davidbunce.com
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
form-uk.org
chewshealth.co.uk
form-uk.org
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
form-uk.org
decodestudios.net
decodestudios.net
decodestudios.net
chewshealth.co.uk
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
www.decodestudios.net
decodestudios.net
www.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
decodestudios.net
office.decodestudios.net
portal.decodestudios.net
chewshealth.co.uk
www.decodestudios.net
decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
www.decodestudios.net
form-uk.org
decodestudios.net
decodestudios.net
www.decodestudios.net
chewshealth.co.uk
chewshealth.co.uk
decodestudios.net
decodestudios.net
www.decodestudios.net
decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
decodestudios.net
www.decodestudios.net
davidbunce.com
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
portal.decodestudios.net
decodestudios.net
chewshealth.co.uk
decodestudios.net
www.decodestudios.net
form.philly.clients.decodestudios.net
form.philly.clients.decodestudios.net
bringz.abrantee.clients.decodestudios.net
decodestudios.net
portal.decodestudios.net
www.decodestudios.net
davidbunce.com
portal.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
davidbunce.com
main.dev.mwarrens.clients.decodestudios.net
decodestudios.net
decodestudios.net

Certificate

The complete raw certificate details for portal.decodestudios.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzHIPmXx6y81Zw4V9MxRc
OcsHGjbRx8ZZjbiqoPY01wWNsYnofq5VFKPJG9PjoRop4UWPW/p9YuVKeE2mDL4b
TsT23Qq9079MhpTdKhGSIjyh/+MvNDf9M+5NdoroMBECJ5FWt/qA0Qx0QJVXTbC7
mSzGcIkErEw/4aSj+0olzSZFUor3fQ8XDFKhhrprnJaMCOVOIBYqHEgnE2KC8geC
FioZdkxxxPJeHxjg+v3du8gNwh3CpG9GkXccBLdjRDUSZCjWq+oZD08q1mbmrMzh
5wEo/Z4PkAEssVeka8PlQ6aFQQ47f9Nz5XaqHAxp3S6KF3hNWnLIDTiELnvcXZET
IdpQqb0for5D/L+jH532uo0/uJBRslUnG+REHdZmUCNxPMmd+bSH2JGP0i26sFnc
7juqI+fTtt201VRRZIvOJDRKYsHJqrV92cm+caOzPcqpAwhUE+dLauByt2goIhpg
MmYa3GcFvwZtz3b6VXACKHa4WapARgVIjp4A53CYTWv+ziwtYQ1jmztmO7TpYxir
0HWOQnKw0n4rOnmArtWcJD144RgktKI/dcDqEumpZBNNXIifZZJvjoBrKo4JgdTA
NcuOOdyoeXS4wnSzWooCjAq5e7AGIZ2EzHGPEJz6tpc0hlvGNvidtdpYoIcyPng9
coe4CJbZEKYR4jcfMdPCPTcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147186477212847787673474762202927718433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06653550'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Derbyshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Dronfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Decode Studios Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Technical'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'portal.decodestudios.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834065077454166933235197472151442164099311063849655334696277814237825174143416617713404871806523587646334211432912475885941314690195218114503500508378902770957849154009131802602547269275670831851102968798620125081884911605755934202797826528309265860158260627831701092867148554565461708499020104229774179323314063474483306405704585547567909179275106368522446386757409739286104339142571484947653197627825356302654811501917299297460155149189627111521585353748251649572851191909906980501469371050833799926604302356346305085133440560792183794483271823889049730011345769375094707102448042942283665615733398572231980033989901835590610721633070547348782940303881526022559023910255754424488540121481113561997213144167214372673344219764440480463068399105330338033479573016168281011381314800784009226615240138807840174221671078800468209436278511243507162928465701642599546812987544690717377282479562402723450038255001067499113390756696515145036892339185260872989731841478669258371478762802371879311824915474237001751320177073762033552931321450868993916472327876474446645253680506106912955026619671744243171584532063446820627385237948780043457818174710043613873284429155111858236952668350775623728011033583877110145732831674033278974987373526327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.decodestudios.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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