*.cok.dk

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 38:8f:a0:64:f4:7a:f5:c3:1a:bc:ff:ef:de:4c:99:00 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.cok.dk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:8f:a0:64:f4:7a:f5:c3:1a:bc:ff:ef:de:4c:99:00
Serial Number (int): 75182519398741596852425922376278776064
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 0f:53:7e:92:e7:a1:e3:18:fe:5b:cf:3e:ec:fe:60:03:8e:0a:83:0c
Fingerprint (sha256): 21:58:ac:51:bb:16:48:58:ea:c4:b2:8b:84:56:a5:75:a7:3c:2d:66:ce:ec:cf:f3:bf:9f:f5:48:88:33:6b:f2

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate *.cok.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cok.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cok.dk
cok.dk

Other certificates including the domain name cok.dk

(limited to 100 certificates)
sipdir02.lync.oncirque.net
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
arena.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
uddannelse.cok.dk
sipdir02.lync.oncirque.net
cas.frontdata.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
uddannelse.cok.dk
cok.dk
cas.frontdata.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
cok.eu
*.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
arena.cok.dk
cok.eu
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
event.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
komponent.dk
sipdir02.lync.oncirque.net
auth.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net

Certificate

The complete raw certificate details for *.cok.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYEfEzgAvU/lwRHER0dK
dboJE5UeCKS/5jNYEH3M7VlJeXyvbvjKY58lPRWpYbhPAccA84kt1LmyVKDwM7xH
KQnLVN+WS8+Xh9hjouTxKwtKPCbXGRQh5okwalQLQQ0GmvQDIVkewNRG9KGE9eKs
f7gUsObTnp2uWllPRHHH+tAlbUC91aJXiihGoet9AR+ydITlpgsCfXLcffnJwNZd
uv4JicEw7XgHV88kgSSBtSFJiL7V64NGw99hbLmSTSBoc3WZUPSjWNmzJmN9Xghm
ViCdro6NL2QylM4L8RWvT3CYtbQji6t1WNDGqmgU+v6VWWRTmfGRvLmdKKNwIfyz
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75182519398741596852425922376278776064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cok.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21902898888153066489233040494236270058063989472589768432817189079198523284512339427212239475203873973871135093528018073168385514188034102132867661082802403516956507794069689501776928083491227777621034591513227929010529444935973944346084666497521430878871247784804523245598065389884729474058440325412864056699322953523214198146038636570242178147413033875501556641568657923061859588390613506229216542305957352315287826445551263726920015491019114343227643235400959299913741158404139715359963815978058572646270662811447414898380825535807273391586685264615769516641930352000537751451383003788071672298984128450762054087541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cok.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cok.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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