www.kioskovenezolano.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 15:b1:41 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=pGvxcsvqtsAglCdWKbW051q/R95Y679L,CN=www.kioskovenezolano.com,OU=GT30744599+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:b1:41
Serial Number (int): 1421633
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 8c:5f:15:39:b6:02:00:9f:88:fb:0d:05:7a:df:27:fc:9c:bb:e3:99
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): e5:8d:95:1f:54:17:e6:df:49:96:56:cf:9d:d5:0e:07:90:7c:51:4a
Fingerprint (sha256): 16:11:19:72:c5:3e:ea:f5:b8:f4:59:49:3d:21:f4:55:c0:35:ab:d4:c3:bf:0a:7f:eb:5f:03:f9:dd:1c:98:90

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.kioskovenezolano.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kioskovenezolano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kioskovenezolano.com
kioskovenezolano.com

Other certificates including the domain name kioskovenezolano.com

(limited to 100 certificates)
pruebas.kioskovenezolano.com
www.kioskovenezolano.com
kioskovenezolano.com
pruebas.kioskovenezolano.com
kioskovenezolano.com
www.kioskovenezolano.com
www.kioskovenezolano.com
kioskovenezolano.com
kioskovenezolano.com
pruebas.kioskovenezolano.com
kioskovenezolano.com
kioskovenezolano.com
kioskovenezolano.com
kioskovenezolano.com
kioskovenezolano.com

Certificate

The complete raw certificate details for www.kioskovenezolano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1421633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-12 23:17:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-16 03:57:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pGvxcsvqtsAglCdWKbW051q/R95Y679L'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT30744599'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kioskovenezolano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834533199609924898789574886029532924705625878940377418176092495097634655396955746782770152927131646955065315876726972312847678093513859882033733354490794410191205886864052523108542559616454143588479869847030791803640456229197149907415794133042398129990010087830329017255389078169033783589302912324171790321288396055334922342520082106986263660869336099989343578697678943515260964410973136423280300764950566176973907999685214539144520888180121273098379486092667283711642155053675353367571985268103966461170172281765411954715710316668769664283607934024904267362373895682449552845068872757482677616133489315385745178971885773234298702917135696949929616481166678940698596603945278568536001463960063768653236562493941830354402438123437225527416205383045240059839999398535104008475434154849409912274263643267975896831627410017486717122473477560654483331028401021116910924059445952350810397078243459436035383227515349143549376661638437079599606227034708076627588274840709179619860642518748711225979801296549428997024168889838161614369450266339950420193867061467830214821360532015836891299855027814965414347399292961165428361503408885985161224220072990093916806503404447317755076502886165999843172848671007064033324867455294264651537261640339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kioskovenezolano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskovenezolano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c5f1539b602009f88fb0d057adf27fc9cbbe399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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