www.gutrad.com

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:6e:54:f6:e0:5a:4b:9e:04:de:a8:71:5b:f5:2f:75 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gutrad.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:6e:54:f6:e0:5a:4b:9e:04:de:a8:71:5b:f5:2f:75
Serial Number (int): 7219015915331898269169343393919479669
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 22:87:b5:4b:50:23:61:cd:b4:5d:52:c4:49:24:62:6f:d9:a8:79:ea
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 90:77:7b:e3:f2:75:c2:e1:f1:34:87:e5:b2:28:b5:52:6c:92:d9:ab
Fingerprint (sha256): 10:a2:05:70:d9:5c:d9:fc:c1:32:13:5e:30:9b:78:a2:c7:43:2f:e0:f8:81:ab:69:6b:c9:83:f6:77:a8:65:46

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.gutrad.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gutrad.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gutrad.com
gutrad.com
mail.gutrad.com
shop.gutrad.com
www.shop.gutrad.com

Other certificates including the domain name gutrad.com

(limited to 100 certificates)
gutrad.com
shop.gutrad.com
www.gutrad.com
gutrad.com
gutrad.com
www.gutrad.com
shop.gutrad.com
www.gutrad.com
gutrad.com
www.gutrad.com
shop.gutrad.com
www.gutrad.com
www.gutrad.com
www.gutrad.com
www.shop.gutrad.com
www.gutrad.com
www.gutrad.com
gutrad.com
www.gutrad.com
shop.gutrad.com
www.shop.gutrad.com
shop.gutrad.com
gutrad.com
gutrad.com
shop.gutrad.com

Certificate

The complete raw certificate details for www.gutrad.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7219015915331898269169343393919479669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gutrad.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618873400813478891373081160432938163069866456660087189582057237641213960139645884024089091779145260406755585155967665112311589129364574905346409291045577164797284294030698310819709861287219397728604196224105919618633741720411235777644310021374074206945760377024063830926493744378227751221110510231525529212358070161434059163268407024127244675597164700500277917512775383648870173645736352209706148570322175803299600586043145632817938787441386219566979985384599546259925403580965195942659449629542795763018070569601172348687412485508746514958086550979815834518081579002559646114778035330090453900156400440361398975169125194438580422034151031124605152831194472580806455027534516698069823272368829925670462403940763850329574104265048439920377315691337798726507841345251671156250911279780421688120805146410128837455377948925623812080508179289323793346523787382914491409357597373580378133564264709154327767507394428106842799572997733169603026200849057673633698858860083050726348547858156184089420703483919810649704976164054065485319890246673981937457327907451008594789498584628686913363024526973238427592289745305634125176341391000569909021404996751047904212383471994539355155363255641987840139238633815729677836352784014230157079704052841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2287b54b502361cdb45d52c44924626fd9a879ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gutrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gutrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gutrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.gutrad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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