www.thehubpeople.com

- Hubpeople Limited -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 28:18 was issued on by GeoTrust Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hubpeople Limited

Company registration number: 114690C
Organization: Hubpeople Limited
Organization unit: Security Department
State / Province: Isle of Man
Locality: Douglas
Country: IM

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:18
Serial Number (int): 10264
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): 4f:4c:93:1f:a1:f1:3e:79:cd:32:08:01:f0:1e:a8:7c:2f:ed:aa:b8
Fingerprint (sha256): 19:8f:a2:84:3f:83:b5:4a:ef:0f:e7:4f:ca:2a:10:43:11:25:d1:14:ec:e3:2f:dc:25:13:87:e0:75:24:65:8d

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate www.thehubpeople.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thehubpeople.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thehubpeople.com
thehubpeople.com

Other certificates including the domain name thehubpeople.com

(limited to 100 certificates)
d.d8u.com
www.thehubpeople.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
www.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
app1.ftrans01.com
d.d8u.com
www.thehubpeople.com
delivery.thehubpeople.com
delivery.acuralabs.ai
delivery.acuralabs.ai
delivery.acuralabs.ai
d.d8u.com
www.thehubpeople.com
d.d8u.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
*.thehubpeople.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
delivery.thehubpeople.com
delivery.acuralabs.ai
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
d.d8u.com
app1.ftrans01.com
*.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
delivery.acuralabs.ai
delivery.thehubpeople.com
d.d8u.com
d.d8u.com
d.d8u.com
delivery.thehubpeople.com
delivery.acuralabs.ai
*.thehubpeople.com
d.d8u.com
d.d8u.com
app1.ftrans01.com
delivery.acuralabs.ai
delivery.thehubpeople.com
d.d8u.com
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
d.d8u.com
delivery.acuralabs.ai
thehubpeople.com
d.d8u.com
delivery.thehubpeople.com
app1.ftrans01.com
app1.ftrans01.com
d.d8u.com
delivery.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
delivery.thehubpeople.com
www.thehubpeople.com
app1.ftrans01.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
d.d8u.com
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
delivery.thehubpeople.com
app1.ftrans01.com
delivery.thehubpeople.com
d.d8u.com
d.d8u.com
d.d8u.com
*.thehubpeople.com
d.d8u.com
d.d8u.com
app1.ftrans01.com
delivery.thehubpeople.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
delivery.thehubpeople.com
d.d8u.com
www.thehubpeople.com
d.d8u.com
delivery.acuralabs.ai
d.d8u.com
d.d8u.com
delivery.acuralabs.ai

Certificate

The complete raw certificate details for www.thehubpeople.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DbNDp0s3KC7kRsNks6B
nOIV+wqeC7DAF1x1aH76YE/YdTFUvaANlL7s9m56H7P8VP2RKK9K2IuSGs26/S/z
uwreU2wittZAZr1BTdC9Kem+Yt8KlkNt2zPLEQMUNxL8S5HB5viWxn0Zh3Z4jOH8
OfGaU1WXWWIYYxKt3puShaQg8orb3erelpIQ+elQY0QmASGGpKNsIuJFrsQ7ulQ3
MBCIGRDXQaGwhYQhYLGCk5QYRqdnq/X/TtAYnqJbeURquAfivK1m0o5hbBDQTQA9
kv5Xj89HLNWrm3Fff6GMxdzKpd8TwjGfr9J/RY4BW2bl4PuRaYwHsgp3Tv9X4KBh
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-01 01:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-30 09:51:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '114690C'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Isle of Man'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Douglas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hubpeople Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Security Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thehubpeople.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28304403694763829887148814833688896538516018755124898512940256905903390883530925667614780598995296332201027756860186688629218428765530822775694801775399910231467737741591504253831123038063684864659725674739096338234432174777647117611635651707339555212610470613871753612928757345723050744578197269529001186762163804881909720331575380667028973427203047706053217730832523956419140345624473616972062676876197407996740367935430635016897862403096271000876399735154940836782812251161397870600651462224131669449820156032698872788673837827411636292563404984739043315121617958292492706461691214367250110637689310753888663527821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehubpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehubpeople.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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