*.achilles.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 12:2f:c1 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=yKzH-6-1W6jDT7OBAb3tlGhSaD0B72XS,CN=*.achilles.com,OU=GT82230643+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:2f:c1
Serial Number (int): 1191873
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: fc:af:68:ca:fc:ff:a8:38:bb:c3:9c:70:fc:61:dc:cd:3e:74:ed:66
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): f8:e8:b3:4b:c4:01:b8:f9:74:19:c5:85:1d:24:16:74:4c:4d:f9:ca
Fingerprint (sha256): 21:75:82:24:12:71:c7:13:9b:b2:71:0c:81:fc:e0:fb:b3:b4:f3:80:5e:8a:5b:ff:0c:a4:35:db:30:81:66:42

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.achilles.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.achilles.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achilles.com
achilles.com

Other certificates including the domain name achilles.com

(limited to 100 certificates)
status.achilles.com
status.achilles.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
uatone.achilles.com
status.achilles.com
dardenstatus.paradox.ai
help.achilles.com
*.achilles.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
status.achilles.com
endpoint-security.status.broadcom.com
search.unce.achilles.com
s1.wac.edgecastcdn.net
status.achilles.com
status.achilles.com
atlanticindustrie-status.polaris.synopsys.com
pages.achilles.com
agency.online.anz.com
marketing.achilles.com
agency.online.anz.com
one.achilles.com
portal.achilles.com
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
status.achilles.com
pages.achilles.com
s1.wac.edgecastcdn.net
status.achilles.com
help.achilles.com
dardenstatus.paradox.ai
s1.wac.edgecastcdn.net
*.achilles.com
status.achilles.com
endpoint-security.status.broadcom.com
agency.online.anz.com
s1.wac.edgecastcdn.net
*.achilles.com
*.achilles.com
endpoint-security.status.broadcom.com
help.achilles.com
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
rrr.achilles.com
s1.wac.edgecastcdn.net
status.achilles.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
pages.achilles.com
status.achilles.com
status.achilles.com
s1.wac.edgecastcdn.net
www.achilles.no
dardenstatus.paradox.ai
status.achilles.com
endpoint-security.status.broadcom.com
dardenstatus.paradox.ai
dardenstatus.paradox.ai
endpoint-security.status.broadcom.com
status.achilles.com
endpoint-security.status.broadcom.com
status.achilles.com
status.achilles.com
endpoint-security.status.broadcom.com
dardenstatus.paradox.ai
status.achilles.com
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
s1.wac.edgecastcdn.net
status.achilles.com
endpoint-security.status.broadcom.com
marketing.achilles.com
status.achilles.com
status.achilles.com
help.achilles.com
atlanticindustrie-status.polaris.synopsys.com
status.achilles.com
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
dardenstatus.paradox.ai
outlook.achilles.com
s1.wac.edgecastcdn.net
*.achilles.com
status.achilles.com
s1.wac.edgecastcdn.net
www.achilles.com
help.achilles.com
endpoint-security.status.broadcom.com
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
endpoint-security.status.broadcom.com
s1.wac.edgecastcdn.net
dardenstatus.paradox.ai

Certificate

The complete raw certificate details for *.achilles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA+IpqPGSeZp/pp79sHu
pAUN5DYxvnWcnvm0o7KUiOdS9RWETQa4xNNaScUKw3/Lj1+MjQIGJHCE1NotmUW/
+FUvukUB7fo+TBbGYcLrKIkKp/E6zdzmBBDZd/oNxwzBuOWj1t37kFy4zpTecFg0
4Euh7LUlCixgeAvI45syzSWAVor5IjTIUgJ66JmxMY6fvQLyJuuQMqJdu90UeRxg
L/M2yTH71emS0/le1rGPgWeZVJGYsZbw3ncEHi31T7YU1hh24eFEr3U+DMRzWDTt
brwA6nIOc2sj4hsHqSvSzC0waXePRJEoh6mhQyvUJj4fMqBC3vORgspz/DXk3PXx
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1191873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-15 06:10:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-22 07:13:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yKzH-6-1W6jDT7OBAb3tlGhSaD0B72XS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT82230643'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.achilles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21215695232980490820345541629308518274680900822233048181319388107632305261222397325042904694763315429796457177935919155250958236127886294421188741174982571636334414773437394695069415072194385580467745216154232508829072797370591438456104734938170734733901875436943595057593828932125271115393538938467388415416440882331221932995142324670402781795871997485634364006256806762474396524776253461885762071695476324528054593156911922506530640233816907553523505563123101470522954676999437850562336004481853149906772208497905262545022323331500736730000032687441242162352851990413491500910109441486246398235126728753138795671887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achilles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achilles.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcaf68cafcffa838bbc39c70fc61dccd3e74ed66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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