billing.decodestudios.net

- Decode Studios Ltd -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 04:7a was issued on by GeoTrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs MUST NOT include the pathLenConstraint field unless the CA boolean is asserted and the keyCertSign bit is set (RFC 5280: 4.2.1.9)

Decode Studios Ltd

Company registration number: 06653550
Organization: Decode Studios Ltd
State / Province: Derbyshire
Locality: Dronfield
Country: GB

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a
Serial Number (int): 1146
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId: 7b:19:94:88:48:16:dd:3b:d5:18:1d:1c:41:8c:32:f7:ad:35:30:57
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): 53:0e:fc:c2:60:b4:c6:3d:2f:67:17:90:6a:b5:9d:8a:5e:88:d5:dc
Fingerprint (sha256): 10:98:52:c8:1c:3b:68:d0:7c:7d:00:ea:d2:78:b6:16:b6:f7:f0:c7:6a:e4:08:2a:0f:fd:6d:c2:97:ce:ff:a2

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate billing.decodestudios.net

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for billing.decodestudios.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name decodestudios.net

(limited to 100 certificates)
www.decodestudios.net
portal.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
www.decodestudios.net
decodestudios.net
www.decodestudios.net
davidbunce.com
decodestudios.net
portal.decodestudios.net
billing.decodestudios.net
www.decodestudios.net
decodestudios.net
davidbunce.com
portal.decodestudios.net
www.decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
www.decodestudios.net
www.decodestudios.net
form.philly.clients.decodestudios.net
decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
chewshealth.co.uk
davidbunce.com
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
form-uk.org
chewshealth.co.uk
form-uk.org
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
form.philly.clients.decodestudios.net
form-uk.org
decodestudios.net
decodestudios.net
decodestudios.net
chewshealth.co.uk
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
www.decodestudios.net
decodestudios.net
www.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
decodestudios.net
office.decodestudios.net
portal.decodestudios.net
chewshealth.co.uk
www.decodestudios.net
decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
www.decodestudios.net
form-uk.org
decodestudios.net
decodestudios.net
www.decodestudios.net
chewshealth.co.uk
chewshealth.co.uk
decodestudios.net
decodestudios.net
www.decodestudios.net
decodestudios.net
portal.decodestudios.net
portal.decodestudios.net
decodestudios.net
decodestudios.net
www.decodestudios.net
davidbunce.com
www.decodestudios.net
main.dev.mwarrens.clients.decodestudios.net
portal.decodestudios.net
decodestudios.net
chewshealth.co.uk
decodestudios.net
www.decodestudios.net
form.philly.clients.decodestudios.net
form.philly.clients.decodestudios.net
bringz.abrantee.clients.decodestudios.net
decodestudios.net
portal.decodestudios.net
www.decodestudios.net
davidbunce.com
portal.decodestudios.net
www.decodestudios.net
chewshealth.co.uk
davidbunce.com
main.dev.mwarrens.clients.decodestudios.net
decodestudios.net
decodestudios.net

Certificate

The complete raw certificate details for billing.decodestudios.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjUvWTND2KatVC7gycph
wyowoxEmaRNDSx9X4ZAYQYyQJ+rncbCokXm2aZa7Ax5MfyykJr97v2s2cM350D3O
VTV58FGa1+1WXuvUSASFlD1GQRnr6fWBsqlESR8NXWjXvzgSXO/qrM1y5+ZAQt7O
t3KiL+OCPq15GNnnsU+hqO8yKJoGdPmunUMkJwQKjQd6bJ612s6rGvMQNDFzsV15
q01vsJwwFM5iECxotopv88qFYLBjtF6ynAy67CLDAGgWz0kcej4tIiQs7q8WESRV
h8pTscU+zdIjd7bIBz5BYE0aLdJaPyGk3yHWImePwKHUN8FL3pjfA9lewfnRMJ+Y
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-10-15 19:41:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-17 18:41:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V1.0, Clause 5.(b)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06653550'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Derbyshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dronfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Decode Studios Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billing.decodestudios.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22496644762663231027583880803088959765697055269335135203840833256683390025022529773993686690022593253131449330896113949179460177641705105667906836824293296774403749041486167626735180685404976783031737664946602740407359669853834144000864253675320519366561227590194482658969993674107748532242317030329126004602198230544664348271196103966305394154262289101074620771618127948930477859640179240073121717520727359262138802197981345579422928052453202945600757607147176910230561535882821928242857279191055103448715355807428702446179074746527959686904671716493807867825758234184052533488942375639015894000870660707123097213137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1994884816dd3bd5181d1c418c32f7ad353057
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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