*.abfrl.com

- Aditya Birla Fashion and Retail Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 17:2b:2c:3d:4e:95:bf:8e:49:c9:42:29:b6:34:18:2b was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Aditya Birla Fashion and Retail Limited

Organization: Aditya Birla Fashion and Retail Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:2b:2c:3d:4e:95:bf:8e:49:c9:42:29:b6:34:18:2b
Serial Number (int): 30796409951231402018377855872403773483
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 5d:eb:3a:83:9f:c4:fa:b7:59:66:22:b4:ff:da:40:d1:19:31:9d:1e
Fingerprint (sha256): 1e:df:3e:87:9f:a1:31:30:9e:b4:bd:b6:02:d8:b4:f9:4d:b7:ed:a7:c4:7e:fa:69:32:8f:24:6b:6e:c6:e4:34

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.abfrl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.abfrl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abfrl.com
abfrl.com

Other certificates including the domain name abfrl.com

(limited to 100 certificates)
qxitdesk.qxites.com
*.abfrl.com
support.alpha-serv.co.in
*.abfrl.com
qxitdesk.qxites.com
sdp.thinkme.in
qxitdesk.qxites.com
admindesk.abfrl.com
servicedesk.cruxdigital.in
askme.poruslabs.com
servicedesk.cruxdigital.in
assist.mindsprint.org
qxitdesk.qxites.com
servicedesk.cruxdigital.in
www.abfrl.com
abfrl.com
helpdesk.sunteckindia.com
support.softobiz.com
*.abfrl.com
sdp.thinkme.in
askme.poruslabs.com
helpdesk.synergycom.com
helpdesk.itsmtest.co.in
support.softobiz.com
qxitdesk.qxites.com
askme.poruslabs.com
askme.poruslabs.com
askme.poruslabs.com
sdpcloudtest.malabargroup.com
askme.poruslabs.com
*.abfrl.com
myit.indiabulls.com
assist.abfrl.com
help.smiledu.in
blog.abfrl.com
askme.poruslabs.com
qxitdesk.qxites.com
itsupport.medibuddy.in
helpdesk.ssdsupport.com
qxitdesk.qxites.com
servicedesk.cruxdigital.in
support.momentumworks.co.in
servicedesk.cruxdigital.in
qxitdesk.qxites.com
askme.poruslabs.com
servicedesk.cruxdigital.in
itsupport.medibuddy.in
sdp.thinkme.in
helpdesk.itsmtest.co.in
support.vivriticapital.com
askme.poruslabs.com
helpdesk.sunteckindia.com
sdpcloudtest.malabargroup.com
helpdesk.itsmtest.co.in
helpdesk.agaticlinical.com
myit.indiabulls.com
helpdesk.jkfenner.com
qxitdesk.qxites.com
helpdesk.ilensys.com
ithelp.sumeru.com
qxitdesk.qxites.com
adfs.abfrl.com
servicedesk.ttkhealthcare.com
helpdesk.sunteckindia.com
sdpcloudtest.malabargroup.com
support.momentumworks.co.in
askme.poruslabs.com
blog.abfrl.com
servicedesk.cruxdigital.in
*.abfrl.com
qxitdesk.qxites.com
askme.poruslabs.com
qxitdesk.qxites.com
helpdesk.sunteckindia.com
blog.abfrl.com
helpdesk.agaticlinical.com
helpdesk.sunteckindia.com
helpdesk.ilensys.com
itsupport.medibuddy.in
askme.poruslabs.com
portal.shubham.co.in
askme.poruslabs.com
itdesk.abfrl.com
askme.poruslabs.com
support.valuepointsystems.com
sampark.madurafnl.com
qxitdesk.qxites.com
it-selfservice.sany.in
assist.mindsprint.org
qxitdesk.qxites.com
helpdesk.sunteckindia.com
sdp.thinkme.in
help.smiledu.in
helpdesk.ssdsupport.com
demohelpdesk.meuspresales.org
servicedesk.cruxdigital.in
helpdesk.sunteckindia.com
qxitdesk.qxites.com
qxitdesk.qxites.com
it-selfservice.sany.in

Certificate

The complete raw certificate details for *.abfrl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq89Hlh/YtD1nLjzqL3ja
MwjotSMxWc5iCGdwub0GySeuAn0jlpW3xH0iLPQ6k4FmeIqzzhyZ33wLNHQSXmGe
TT0MFJUcjeLmW4BmevWelTNAWRErcmSYbdAUV6uVOJ3vymoz4ArjCofELYoIG659
PAIOFIyQfpa6c9EcJJIKmmvP4ox4Y1+IQipbLFQCW5B0d/0Vn9vx18rrLWAclylr
FAGWDXvd5LEGy39J+7CxMIWRS8DjNKYhYovaSQEZ0RwFoWx/e9TeFw239iNlfT9z
gwVmvnnyY7kemuXxd+LZit64oycPqUyq6DonjAHpuRSKOtk2ciVbuEGiGggLAJPC
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30796409951231402018377855872403773483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Aditya Birla Fashion and Retail Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.abfrl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21688963546496972041768496588864388297028750872263295795784349431851039416829504124906192278770887629020284559809608157878986332202202101474823643632909414555761759599455548521039156088087306159622657231485383617532287439813647486769097603513755395812427134127156214080109532426765531861663342746821488090974527948976921461737388558857136815493207632945573291361716349809392570659143413510490662563101381922113393746516215251102438553807368913862844418990671791176945381281840143715381801534924294160454525052359816792826911088031493761593585250332646336456339767071728860225911393334204674480766421178591306742743651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abfrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abfrl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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