www.nrml.ca

Issued by AlphaSSL CA - G2

About this certificate


This digital certificate with serial number 11:21:93:77:31:c7:ba:e4:8a:65:7e:bb:e1:1d:b8:f7:36:49 was issued on by AlphaSSL .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.nrml.ca

Organization unit: Domain Control Validated
Country: US

AlphaSSL

Organization: AlphaSSL
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:93:77:31:c7:ba:e4:8a:65:7e:bb:e1:1d:b8:f7:36:49
Serial Number (int): 1492334194356684025984445232555636098020937
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 0f:a7:16:0b:5b:5d:b8:3e:ce:0f:bb:02:f0:41:b9:2a:95:c5:ba:d0
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e

Fingerprint (sha1): c2:5d:ca:56:b6:60:47:3c:79:6d:af:1b:5f:41:37:0b:90:50:67:aa
Fingerprint (sha256): e2:24:83:fe:d9:b1:ef:a2:8d:80:68:97:18:e1:8d:cd:f9:47:94:73:c3:a7:f5:9e:ec:4a:15:09:a6:4e:38:20

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt

Revocation information

CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crl

Check the revocation status for the current certificate on www.nrml.ca
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nrml.ca
nrml.ca

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIEejCCA2KgAwIBAgISESGTdzHHuuSKZX674R249zZJMA0GCSqGSIb3DQEBBQUA MC4xETAPBgNVBAoTCEFscGhhU1NMMRkwFwYDVQQDExBBbHBoYVNTTCBDQSAtIEcy MB4XDTEyMDUyNDAwNDg0MloXDTEzMDUyNTAwNDg0MlowRjELMAkGA1UEBhMCVVMx ITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UEAwwLd3d3 Lm5ybWwuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCth2Lsbcvy Y5JDtYboTMWM3wLiB3TDA6Qdr2RS72DPeCR5GCWpvCebLMXk4v/fNjuAmr/BSpPW yefhfmMzNUgUf4fSgHK4EBJ6qWxJiEMC5IFjz34Ua6paDXz/MMQ0BjoUAWE7xLCi n/0q6q6CjgBTJOOq/Eop7/MZU+R2StEKBhuFiJOiIltenJE7KJo/gGKyrOBSdQqT Lh96TfulibVS7XVa7pB8EpEum6baNZpc4p6uxVv5TXxm/q+LszvNW94zwkHWf1Lq 2BFFYiShkn20EzXQ2hAxr59dSlCteJqvvP6y5Nr8JTJq3pQXoNLg/hMNyUNW3NUP Z2Y4j0aQQc8/AgMBAAGjggF4MIIBdDAOBgNVHQ8BAf8EBAMCBaAwTQYDVR0gBEYw RDBCBgorBgEEAaAyAQoKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh bHNpZ24uY29tL3JlcG9zaXRvcnkvMB8GA1UdEQQYMBaCC3d3dy5ucm1sLmNhggdu cm1sLmNhMAkGA1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwyLmFscGhhc3NsLmNvbS9ncy9n c2FscGhhZzIuY3JsMEwGCCsGAQUFBwEBBEAwPjA8BggrBgEFBQcwAoYwaHR0cDov L3NlY3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhZzIuY3J0MB0GA1Ud DgQWBBQPpxYLW124Ps4PuwLwQbkqlcW60DAfBgNVHSMEGDAWgBQU6hlV8A4NMsYf dDO3jmYaTBIxHjANBgkqhkiG9w0BAQUFAAOCAQEAYFw1JVk8WznbR/fZP+pRKo4E McVKDm5j6LV8sh9ebMmk7IXZYgLub3xZ4HkYxjbs92WpDgveB/p+FaNUMaOVVTkj 2z0KzX7Q3qbhRAzgVBBgK0RRLu7qNcnKdQ4ABl8Dep8ZsxODyXPEdyE65gXPSaBo DXE3B9nj+164oNgpysMhupBap/+TW1R/GtQUqlqBJ+x/JrcKRjoysuVX0SrEec9P h/DXYbMWZ2hlM47t3sWCaeDfl9fJtMxbXhJswPXN6DRr1gGd88xmNd+FgZ0tjXqq wCqxPrKNW5GlztrIFSt2BODS/dw/TLuFUZ8sSgVDrQM7hDFpAqG8MEXWobsauQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYdi7G3L8mOSQ7WG6EzF jN8C4gd0wwOkHa9kUu9gz3gkeRglqbwnmyzF5OL/3zY7gJq/wUqT1snn4X5jMzVI FH+H0oByuBASeqlsSYhDAuSBY89+FGuqWg18/zDENAY6FAFhO8Swop/9Kuqugo4A UyTjqvxKKe/zGVPkdkrRCgYbhYiToiJbXpyROyiaP4BisqzgUnUKky4fek37pYm1 Uu11Wu6QfBKRLpum2jWaXOKersVb+U18Zv6vi7M7zVveM8JB1n9S6tgRRWIkoZJ9 tBM10NoQMa+fXUpQrXiar7z+suTa/CUyat6UF6DS4P4TDclDVtzVD2dmOI9GkEHP PwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492334194356684025984445232555636098020937 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-05-24 00:48:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-25 00:48:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.nrml.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21905988291125001170752190801906879610943128745943395979350159310351251664686296897167946055965762513579426523333175792358326439924930033992678374166260334117046046235386955902695209708312621712063043882749575612368162066935546057790610125979977911755651411504217452967558555653789197911711981803464180833306702646788499581612836469171670736548888700623759515252668417145722033976764936267813770120420697312388883535238612946139455996695261663154828956149497448305526476316757325784328963251549846251400967946443438505362948951465016826484486879733343865906768939740333536403675086347991932236058288593923526747082559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrml.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrml.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0fa7160b5b5db83ece0fbb02f041b92a95c5bad0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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