opsvpn.truno.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 06:a8:8e:3c:9b:47:a6:ac:78:cf:d4:4f:a4:40:44:67 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opsvpn.truno.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a8:8e:3c:9b:47:a6:ac:78:cf:d4:4f:a4:40:44:67
Serial Number (int): 8850558750853613021959093273457869927
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:1d:a8:04:37:24:1d:63:cb:e8:8a:2d:a3:74:6d:92:12:f1:4e:ec
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 43:32:fc:ee:55:0d:2c:cc:f3:9f:df:dc:6a:61:92:27:6b:44:ea:e3
Fingerprint (sha256): 2c:5b:0c:a7:d5:a2:2c:f4:ec:e4:82:44:23:09:1b:0d:09:52:1d:71:b0:3f:e3:15:a8:0e:85:41:45:dd:e9:a2

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate opsvpn.truno.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opsvpn.truno.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opsvpn.truno.com

Other certificates including the domain name truno.com

(limited to 100 certificates)
helpdesk.ejplastics.com
licensing.truno.com
ssc-sd.oshco.com
blog.truno.com
www.truno.com
servicedesk.primeenergy.ph
www.truno.com
blog.truno.com
ithelp.newhopechurch.tv
www.truno.com
orange.truno.com
orange.truno.com
blog.truno.com
*.truno.com
blog.truno.com
www.truno.com
servicedesk.towermsa.com
www.truno.com
hd.gsp.bl.it
helpdesk.americanassets.com
helpdesk.worldvision.org.uk
helpdesk.maruservices.com
www.truno.com
www.truno.com
hd.gsp.bl.it
desk.kavasa.in
info.truno.com
www.truno.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
helpdesk.charlesignatius.co.in
timeforgekb.truno.com
helpdesk.endemolshine.com.au
email.truno.com
remoteservices.truno.com
hd.gsp.bl.it
*.truno.com
ssc-sd.oshco.com
ssc-sd.oshco.com
www.truno.com
servicedesk.gourmetegypt.com
mail.truno.com
email.truno.com
hd.gsp.bl.it
hd.thehackettgroup.com
servicedesk.towermsa.com
opsvpn.truno.com
*.apps.truno.com
hd.gsp.bl.it
swkey1.truno.com
servicedesk.ibsagroup.com
blog.truno.com
helpdesk.endemolshine.com.au
hd.gsp.bl.it
helpdesk.maruservices.com
hd.gsp.bl.it
www.truno.com
www.truno.com
hd.gsp.bl.it
www.truno.com
info.truno.com
helpdesk.charlesignatius.co.in
hd.gsp.bl.it
www.truno.com
remoteservices.truno.com
www.truno.com
www.truno.com
helpdesk.americanassets.com
helpdesk.riversidecc.org
info.truno.com
mesadeayuda.pffsa.com
ssc-sd.oshco.com
support.cortacgroup.com
mail2.crstx.com
hd.gsp.bl.it
email.truno.com
www.truno.com
atendimento.escrimig.com.br
orange.truno.com
info.truno.com
email.truno.com
atendimento.escrimig.com.br
helpdesk.worldvision.org.uk
atendimento.escrimig.com.br
esupport.infimedia.co.id
helpdesk.ejplastics.com
remoteservices.truno.com
sos.olanet.mx
sos.olanet.mx
atendimento.escrimig.com.br
desk.kavasa.in
servicedesk.zip.co
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
esupport.infimedia.co.id
remoteservices.truno.com
hd.gsp.bl.it

Certificate

The complete raw certificate details for opsvpn.truno.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8850558750853613021959093273457869927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 16:04:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-14 16:04:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'opsvpn.truno.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892974898458107593801964378474851967805930438370963979456436434652084772231962738597173133621528817327228038945674327154217004555270523645948609150782655447131497993093870456047618392570645433476785521835745002376546208197782169289535094046725782035963320243654657634001608362488765343255758124213735247365472389618611918129199646676261142005912119867606507670443592629010538243275670290576857938227873835504231668370870083166415352127401070527542173064257842162444517962583642355218916424834415622056066679438945569253067801725825467784871582580587200318508099065371409453058166236704003462261358298359167557234737155606536781393245226911922733226504288308002520646033228995773198124456756225331335875600327063553454483170775175895452297055179948400807178732302639782561511831554249139617354499438735329366261347046593795743995435829784111324100391848692442129107175959951817826633014519558892634250053165804131131462421280809806984842920519014406852366860276835966084299343140312720045008909990990582215499515026705414030476420136216505920111068353925881941195510547055849212784392591451148999453270169370563437073984489209217828884821151007138837830341667989348112685505309424882540700548972744610950498105885229520935815163295299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsvpn.truno.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							241da80437241d63cbe88a2da3746d9212f14eec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017791df947b0000040300473045022100915827d4083e5281e095b2a6e4eae0e9d8d5b97e9c07b6af4945f21018fbc2c50220114ba49f49c7efec56931de29132c27c4947184ab49a56881840622b6a7e922000770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017791df94d80000040300483046022100a7c9445141c61d450b7fbeecc5a914212fa2108c50064de5dadffa8359f7d53002210089eac4e3a989f31f123f0d90c6a9f758d05fdec343aeedc0d439f55700397660
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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