oma.metro.net

- oma.metro.net -

Issued by Thawte DV SSL CA

About this certificate

This digital certificate with serial number 63:ab:9e:ed:9d:b3:2c:5e:82:20:43:9c:f7:30:07:54 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

oma.metro.net

Organization: oma.metro.net
Organization unit: Go to https://www.thawte.com/repository/index.html
Organization unit: Thawte SSL123 certificate
Organization unit: Domain Validated

Thawte, Inc.

Organization: Thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:ab:9e:ed:9d:b3:2c:5e:82:20:43:9c:f7:30:07:54
Serial Number (int): 132484677792113773577688559546446907220
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 75:1b:9e:c6:96:56:60:f3:00:f6:f5:48:48:ea:47:ce:4e:d8:cc:f5
Fingerprint (sha256): 22:b1:1c:fe:a1:27:70:6b:25:58:bd:c1:25:fb:67:be:a5:e4:d0:46:3a:0b:10:47:57:f0:6a:16:af:06:dc:43


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl

Check the revocation status for certificate oma.metro.net

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oma.metro.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name metro.net

(limited to 100 certificates)
bsms.metro.net
api.metro.net
riskmastert.metro.net
developer.metro.net
emailmarketing.metro.net
webpay.metro.net
metro.net
webmail.metro.net
secure.metro.net
realtime01.metro.net
jobs.metro.net
jobs.metro.net
developer.metro.net
beta.metro.net
developer.metro.net
riskmaster.metro.net
media.metro.net
developer.metro.net
thesource.metro.net
mpvdev.metro.net
moreexpo.metro.net
webmaps.metro.net
mpvdev.metro.net
media.metro.net
shop.metro.net
tbi.metro.net
esign.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
san-11-s10.tlsprovisioning.exacttarget.com
mpv03.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
access.metro.net
shop.metro.net
elpasajero.metro.net
api.metro.net
trips.metro.net
beta-mygrants.metro.net
boardagendas.metro.net
expo2.metro.net
payments.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
thesource.metro.net
shop.metro.net
bikeshare.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
dvr.metro.net
thesource.metro.net
jobs.metro.net
thesource.metro.net
thesource.metro.net
status.metro.net
developer.metro.net
NextFareAPI.metro.net
bsvcd.metro.net
developer.metro.net
globalprotect.metro.net
art.metro.net
oma.metro.net
boardagendas.metro.net
americafastforward.metro.net
thesource.metro.net
VIEW.METRO.NET
shop.metro.net
lswebext.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
elpasajero.metro.net
thesource.metro.net
shop.metro.net
boardagendas.metro.net
realtime02.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
beta.metro.net
thesource.metro.net
lesrpub.metro.net
secure.metro.net
media.metro.net
bikeshare.metro.net
media.metro.net
arubacontrollers.metro.net
san-11-s10.tlsprovisioning.exacttarget.com
adfs.metro.net
riskmaster03.metro.net
trip.metro.net
mpv.metro.net
media.metro.net
bikeshare.metro.net
boardagendas.metro.net
program.metro.net
bikeshare.metro.net
mtaflm.metro.net
media.metro.net
moregold.metro.net
www.metro.net
boardagendas.metro.net
shop.metro.net
rdc.metro.net
connxtmobledata2m3dev.metro.net
apps.metro.net
records.metro.net
americafastforward.metro.net

Certificate

The complete raw certificate details for oma.metro.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSzUDzz+7t6hwbWxGqTt
l/B+fZ++HsnIFawcjDzaeGmgXjx3f6LOqOHGFfJgNgIAqlvUqlJsOoczTsDvlfiW
sww8oA/atiZ/ukZ+COEu6qWIrXljo5jzgh/RBif1KYOhG/By/twdX7dFFeiJFOYt
pSfQYJ6RacCdh4Td55/uIqgJq2wTytz0B3irEbeRREI6QJSGp5f85wJMb6gP8QN6
n1AC4ZgLynt1I8oR4rQH1WkNDFaLzvBgljDaIJJopc6CR6P9N0v7uSQUoIpiI76p
Ef8oNG9vr/AqrXMkqHQ1JPx35h8i1b89E08NP/E/P6zMWx5oRdvPdMdTnf7F+8i1
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132484677792113773577688559546446907220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oma.metro.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Go to https://www.thawte.com/repository/index.html'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte SSL123 certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'oma.metro.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25900958205024119099440425528119130265284976476990411136152523979532699677569135459800777933567686526897035907344136618311053846218883787632471473907053645751632921755984100517758889134521177853229620611203838877444272738336223121177894039159023637220011709838384925670244284504484870760726339627547492263156121922362379885492802534576902389585367407062428160866024036398542428700153084966751776581823970106259268081296991803414576178018289479768619632759744476994419577379540782545800491413513686705244575592566056028135631032540385006302298018427622730598767164469442140736192317252009976085646246754115254714152327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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