*.newsmanapp.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 11:bc:cd was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=vP2/iQVjEgWdqA5KxmMA4RmDdyi6HomG,CN=*.newsmanapp.com,OU=GT04078816+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:bc:cd
Serial Number (int): 1162445
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: b7:56:9c:d7:2d:96:c2:8f:61:e4:7d:63:56:cc:56:0e:08:30:f1:e8
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): bf:c6:07:0f:a9:85:f4:ce:1a:66:fb:c3:b0:5e:0b:96:79:4c:36:de
Fingerprint (sha256): 22:62:62:58:4e:25:3c:14:67:b8:1e:15:ca:67:f8:ce:4d:b5:46:cc:5c:73:cf:74:aa:ca:33:42:1d:14:59:32

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.newsmanapp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.newsmanapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.newsmanapp.com
newsmanapp.com

Other certificates including the domain name newsmanapp.com

(limited to 100 certificates)
img.newsmanapp.com
x2s3.newsmanapp.com
status.newsmanapp.com
inboxtest.newsmanapp.com
newsman.ro
blog.newsman.ro
moto.newsmanapp.com
secure.newsmanapp.com
x2s3.newsmanapp.com
moto.newsmanapp.com
status.newsmanapp.com
webmail.newsmanapp.com
moto.newsmanapp.com
x2s3.newsmanapp.com
moto.dazoot.ro
status.newsmanapp.com
cdn.newsmanapp.com
x2s3.newsmanapp.com
status.newsmanapp.com
blog.newsmanapp.com
webmail.newsmanapp.com
webmail.newsmanapp.com
editorcore.newsmanapp.com
editorcore.newsmanapp.com
eurocor.newsmanapp.com
moto.newsmanapp.com
moto.newsmanapp.com
status.newsmanapp.com
eurocor.newsmanapp.com
moto.newsmanapp.com
img.newsmanapp.com
secure.newsmanapp.com
*.newsmanapp.com
blog.newsman.ro
newsmanapp.com
status.newsmanapp.com
editorcore.newsmanapp.com
status.newsmanapp.com
editorcore.newsmanapp.com
moto.newsmanapp.com
blog.newsman.ro
moto.newsmanapp.com
enadriansite.newsmanapp.com
ssl.newsman.ro
xap.newsmanapp.com
etna4.newsmanapp.com
cdn.newsmanapp.com
blog.newsman.ro
man6.newsmanapp.com
cdn.newsmanapp.com
inboxtest.newsmanapp.com
blog.newsman.ro
inboxtest.newsmanapp.com
inboxtest.newsmanapp.com
*.newsmanapp.com
secure.newsmanapp.com
editorcore.newsmanapp.com
cdn.newsmanapp.com
editorcore.newsmanapp.com
blog.newsman.ro
newsman.ro
cdn.newsmanapp.com
moto.newsmanapp.com
blog.newsman.ro
status.newsmanapp.com
etna4.newsmanapp.com
moto.newsmanapp.com
cdn.newsmanapp.com
img.newsmanapp.com
secure.newsmanapp.com
inboxtest.newsmanapp.com
inboxtest.newsmanapp.com
img.newsmanapp.com
cdn.newsmanapp.com
moto.newsmanapp.com
etna4.newsmanapp.com
ersapps.newsmanapp.com
moto.dazoot.ro
blog.newsman.ro
moto.newsmanapp.com
x2s3.newsmanapp.com
newsmanapp.com
x2s3.newsmanapp.com
blog.newsman.ro
fast.editor.apps.newsmanapp.com
*.newsmanapp.com
blog.newsman.ro
moto.dazoot.ro
moto.newsmanapp.com
newsmanapp.com
x2s3.newsmanapp.com
newsman.ro
blog.newsman.ro
newsman.ro
editorcore.newsmanapp.com
blog.newsman.ro
blog.newsman.ro
www.newsmanapp.com
img.newsmanapp.com
blog.newsman.ro

Certificate

The complete raw certificate details for *.newsmanapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxncU/bxLjX6oJ1cf2KLO
BmYnXab/M3bPJ+LzMVgI0tmWOElr1BwSlFlNahb536xC7KEBRx7DlHlWuptPSdOf
2urwwtNuK2F+j7u+Ak9uZD0Fookb++UEk41nHGmXvofrhYIuGvCoM03a5wnWNPrm
tmY9U/5LhAtlMzS7eBvoS1uymTg+7g41g6YnHW4wPZHa3OGIJn7i8pdBNZSYDB9m
WoMKJWrQBT5hdL6exeQw3v7L1edklNtJ+N+ksl2Ac6gHToyLsH2du2sYHGCCPv4g
NwsXN+Bdwf6pFW1HwpHxeBqYAJstoSn28QbpCIX1cmPPolBrXnO/AjS6U0xNBz5W
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1162445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-06 19:16:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-08 12:12:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vP2/iQVjEgWdqA5KxmMA4RmDdyi6HomG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT04078816'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.newsmanapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25053905904431912174730847922835198516812156103434953860613833564353461724769752949178463121597371624409666585072765681356781584865385381188785092782462398033810564389569425395288814912090534247583474480982982580138041878850069478982952489661409771979018904807794403645950645549226835399966113483672917091328675844241805032540248552931412875723011112377628557395828491590031798885934786918632467706138976775976548580504447034317371786659969349355016725667032443836089108143166396732620588969566024207762473008988502488419568745563932551501706517773479488129300636174396813183179403534786458702240260412666484740740611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsmanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmanapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7569cd72d96c28f61e47d6356cc560e0830f1e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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