www.arvig.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 76:f2:24:2d:5f:0f:01:64:34:1e:94:48:11:82:f0:61 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.arvig.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:f2:24:2d:5f:0f:01:64:34:1e:94:48:11:82:f0:61
Serial Number (int): 158106173103817762281902560418877075553
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): d9:20:ad:ef:a6:0d:5b:b8:5c:3a:62:54:f4:da:c2:2e:ff:21:5d:41
Fingerprint (sha256): 20:2c:52:40:ff:8f:42:48:16:ee:26:3c:97:7a:15:c5:04:df:a3:55:d6:c2:42:0d:bc:28:ba:4c:06:90:41:6c

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.arvig.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arvig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arvig.com
arvig.com

Other certificates including the domain name arvig.com

(limited to 100 certificates)
insider.arvig.com
my.arvig.com
northstarfiber.com
northstarfiber.com
connect.arvig.com
san-23-s12.tlsprovisioning.exacttarget.com
arvig.com
support.arvig.com
musicfm.jp
northstarfiber.com
connect.arvig.com
www.slingui.com
northstarfiber.com
arvig.com
northstarfiber.com
northstarfiber.com
pmo.arvig.com
gms.arvig.com
arvig.com
arvig.com
usage.arvig.com
www.arvig.com
northstarfiber.com
northstarfiber.com
newsroom.arvig.com
newsroom.arvig.com
onlinebackup.arvig.com
www.piggyvest-webapp.live
wugisp.arvig.com
arvig.com
newsroom.arvig.com
northstarfiber.com
northstarfiber.com
pmo.arvig.com
arvig.com
northstarfiber.com
arvig.com
arvig.com
www.paulopensearch.org
ebpp.arvig.com
northstarfiber.com
northstarfiber.com
northstarfiber.com
san-23-s12.tlsprovisioning.exacttarget.com
*.arvig.com
www.altonvalley.com
northstarfiber.com
app.billchallenge.com
www.maps4us.com
san-23-s12.tlsprovisioning.exacttarget.com
northstarfiber.com
northstarfiber.com
secure.arvig.com
northstarfiber.com
arvig.com
gipeats.io
auth.noc.agel.adani.digital
newdev.arvig.com
livechat.arvig.com
www.piggyvest-webapp.live
imc9dejulio.com.ar
insightvm.corp.arvig.com
corpvpn.arvig.com
northstarfiber.com
*.arvig.com
extranet.arvig.com
northstarfiber.com
northstarfiber.com
workforce-dev.arvig.com
webaccess.arvig.com
san-23-s12.tlsprovisioning.exacttarget.com
northstarfiber.com
dev-sidekick.arvig.com
northstarfiber.com
san-23-s12.tlsprovisioning.exacttarget.com
san-23-s12.tlsprovisioning.exacttarget.com
northstarfiber.com
admin.monocle.us
*.arvig.com
northstarfiber.com
arvig.com
imc9dejulio.com.ar
bmwlog.pp.ua
connect.arvig.com
*.arvig.com
northstarfiber.com
arvig.com
wugisp.arvig.com
client.puregym.app.godo.fitness
san-23-s12.tlsprovisioning.exacttarget.com
san-23-s12.tlsprovisioning.exacttarget.com
newsroom.arvig.com
*.arvig.com
northstarfiber.com
newdev.arvig.com
www.maps4us.com
support.arvig.com
arvig.com
san-23-s12.tlsprovisioning.exacttarget.com
northstarfiber.com

Certificate

The complete raw certificate details for www.arvig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcaH6YYZdUD1bgxSPYYF
PFOu18iMjGYO94AS6OWFz4eI8e11ipY7nvNbkxChDxCyrnlxsv4LkNY56kczvjHs
tmlcuoMtUH8XK6E5fAnONlo9k4UhBfUT/IbLKyjtiQ3ZEL3rMf7jJHLnatcbFPcx
tNH43prsCog2p5Ap29IYCle7sROoVafguakT40+Ys14v86SB12ym4TgSTsYBW5Ui
hQCByo/+WP6JKKsDPpkTVf10BbCPZi5/BYWQNbyMcXzuK779ExZV0h/jTvgnNg0N
85m1g/Y17GikwGLNJJT6cR3MIbrKoqFRK8APN61GmEjSngMQBcP2GCveQCGszWHZ
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158106173103817762281902560418877075553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.arvig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24966845317329974048997735304331849673112305572499161613839626222126147589606313438207820167290959787669948200519153298607325687706517217130442330828667182057880997915702544265876357680167692119022970619409640356155194739815832322782288524876722302936243171212807345412977508872964741181127867352305948877231970416386362024446684114194745093617313747799654920422542001304256451618646490873278858250097947515464193382878459272760985895598621950148475101427359663389541558057929897351372593639348975411662142887265845176699993360123137257057307417013976809349632518752953836957145260134546128093091972979433787313215931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c82c010e1000004030046304402202ad247e30845130e6d6ee1f6eca041142b755341542528903054606ce4f29eb302200b102f7311f0e01f2e0e1147a794018edb3a65054761a81b6e2f1f6f92811dd8007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c82c0111b0000040300463044022047d2f0fdcda1bd7746639bf84efefcb94dbb0b285219eb577b0131888d924f0c02200efaa13ea2b16d9579a0324c83d794dc23681903a556dad8382aef7f570b3137
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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