*.virtual-developer.com

- Generative Software GmbH -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 07:dc:24:f3:5c:fc:8e:21:73:ce:99:84:af:18:70:ad was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Generative Software GmbH

Organization: Generative Software GmbH
State / Province: Baden-Wuerttemberg
Locality: Freiburg im Breisgau
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:dc:24:f3:5c:fc:8e:21:73:ce:99:84:af:18:70:ad
Serial Number (int): 10447650727339237018207186698074878125
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 54:d0:4a:a1:28:0e:bd:0e:50:52:e0:00:cd:bb:fe:a2:14:1d:a8:ed
Fingerprint (sha256): 1e:34:a5:d8:17:dc:1d:42:9e:31:c3:b8:1c:66:51:28:bf:a5:09:9a:c6:a0:08:c3:16:67:4b:53:46:2d:d5:51

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate *.virtual-developer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.virtual-developer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.virtual-developer.com
virtual-developer.com

Other certificates including the domain name virtual-developer.com

(limited to 100 certificates)
status.markerspro.com
status.fastcash.network
status.skysilk.com
status.mediaconnect.no
status.ipvoice.cloud
status.autospf.com
status.nexiopay.com
status.markerspro.com
status.mediaconnect.no
*.virtual-developer.com
site24x7.isp.com.de
status.autospf.com
*.virtual-developer.com
status.lrsocialjustice.com
status.singhit.ca
status.sermonbox.com
status.sermonbox.com
noc.activ.link
*.virtual-developer.com
site24x7.isp.com.de
status.warrantywise.co.uk
status.warrantywise.co.uk
status.synccentral.eu
status-clp-sg.uleeco.com
status.swiftech.news
status.zoho.sa
status.virtual-developer.com
www.metroliststatus.com
status.warrantywise.co.uk
status-clp-sg.uleeco.com
status.singhit.ca
*.virtual-developer.com
status.godatafeed.com
status.fastcash.network
status.ipvoice.cloud
status.nexiopay.com
status.skynetexpress.com
*.virtual-developer.com
status.smartdraw.com
status.autospf.com
status.sandeshlive.com
status.virtual-developer.com
status.sirocco.global
status.warrantywise.co.uk
status.cerensa.com
status.lrsocialjustice.com
noc.activ.link
status.expedient.cloud
uptime.etosoftwareau.com
status.synccentral.eu
benarit.noc.cloudi.cloud
status.sermonbox.com
status.sermonbox.com
status.markerspro.com
*.virtual-developer.com
status.lrsocialjustice.com
noc.activ.link
uptime.etosoftwareau.com
status-clp-sg.uleeco.com
status.sirocco.global
status.swiftech.news
status.rcav.org
status.yup.chat
status.yup.chat
status.singhit.ca
status.markerspro.com
status.clinisys.com.br
status.markerspro.com
status.sermonbox.com
status.autospf.com
status.autospf.com
status.autospf.com
status.markerspro.com
status.markerspro.com
status.markerspro.com
status.wisecx.com
status.sermonbox.com
status-clp-sg.uleeco.com
status.expedient.cloud
status.autospf.com
www.metroliststatus.com
status.analytics.owhealth.com
status.odpcloud.net
status.cerensa.com
disponibilidade.activeonsupply.com.br
status.sermonbox.com
status.singhit.ca
status.sermonbox.com
benarit.noc.cloudi.cloud
status.markerspro.com
status.mediaconnect.no
status.clearviewconnect.com
status.skysilk.com
*.virtual-developer.com
status.sermonbox.com
status.virtual-developer.com
status.sermonbox.com
status.odpcloud.net
status.sermonbox.com
status.odpcloud.net

Certificate

The complete raw certificate details for *.virtual-developer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBM54Eq4m21ri7H0izx4
Mw68lNPIvEIPxdMuxFFbPB/qo5CHjftZEwhfYhlHMPZOn7hZxWrw/khnRlEgZ1L2
AA5AyQiOKgbCGsI4D+nVtTiIQkriroPTbij8oUUoDgSVhn4xGxHGOQpg5yUk0GGH
60NuLtxMpx3dzc6TEY4agKGudjthn/7KbD61YjUR8Nsk6WRV37erGGEbwr/P30AG
i5SWqoj8iLrypTWulA1zgX441QpZrm7jt1tqo7ids9Fbd/vBR57NP54ktU8Eb9tj
XDVqFtptEKDnNpBVyORfA0wAFcZGaJFAWWoiF5lPxwiHuU0yLGXPQE/puKlryECt
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10447650727339237018207186698074878125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freiburg im Breisgau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Generative Software GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.virtual-developer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25762094945821105230704461279296080414746640315834676570760596792066576899829073948987630072636654305182395951940238264860406499041172442259816452254585197194796027938847002410521007169299331545543877395538825126263484903348945850177993929497636262166745922102254904493778379414447578594498499205578749815398231175632191139123166837032489946336578312795900563190674648181319206156490338018582644106279078349212343225064717308608357272335637993099670510143221674090883024268341240296894881398380113740225990281792484469103003281637989156872589636555535346163997732862074997693224754163325751756013204102839421886311783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtual-developer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual-developer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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