xdc.i-csr.net

- Artizan Internet Services LLC -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 6f:71:aa:8e:69:7e:73:07:6c:7d:55:3c:b4:b4:3a:45 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Artizan Internet Services LLC

Organization: Artizan Internet Services LLC
Organization unit: Internet
State / Province: Connecticut
Locality: Windsor
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:71:aa:8e:69:7e:73:07:6c:7d:55:3c:b4:b4:3a:45
Serial Number (int): 148134496369820589117457451356964272709
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 41:a8:00:f2:d3:08:56:54:86:c8:21:64:f8:2f:a9:d9:50:27:03:9c
Fingerprint (sha256): 2d:18:96:12:92:ad:f0:9a:61:05:bc:97:73:8b:56:3e:11:a3:15:2e:a4:95:e3:08:03:fb:5e:58:6e:7e:88:13

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate xdc.i-csr.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xdc.i-csr.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xdc.i-csr.net

Other certificates including the domain name i-csr.net

(limited to 100 certificates)
*.i-csr.net
wwi.i-csr.net
wd03.i-csr.net
wwe.i-csr.net
sni.cloudflaressl.com
wd15.i-csr.net
wd05.i-csr.net
wd01.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
ww8.i-csr.net
wwh.i-csr.net
wd03.i-csr.net
www.i-csr.net
wwc.i-csr.net
wd02.i-csr.net
ww6.i-csr.net
wwi.i-csr.net
ww8.i-csr.net
i-csr.net
wwo.i-csr.net
wd01.i-csr.net
*.i-csr.net
ww3.i-csr.net
wwc.i-csr.net
wwh.i-csr.net
*.i-csr.net
ww7.i-csr.net
i-csr.net
wwc.i-csr.net
wwl.i-csr.net
wwa.i-csr.net
wwk.i-csr.net
xdc.i-csr.net
wd11.i-csr.net
wwd.i-csr.net
ww6.i-csr.net
wd04.i-csr.net
wwc.i-csr.net
ww3.i-csr.net
ajg.i-csr.net
wwn.i-csr.net
*.i-csr.net
usi.i-csr.net
wd01.i-csr.net
ww7.i-csr.net
wwd.i-csr.net
wd05.i-csr.net
ww4.i-csr.net
usi.i-csr.net
www.i-csr.net
ww6.i-csr.net
wd12.i-csr.net
wwg.i-csr.net
wwo.i-csr.net
wwa.i-csr.net
wd12.i-csr.net
wwn.i-csr.net
ww7.i-csr.net
wd05.i-csr.net
*.i-csr.net
wwe.i-csr.net
ww9.i-csr.net
ww9.i-csr.net
*.i-csr.net
wd04.i-csr.net
wwh.i-csr.net
wwe.i-csr.net
ww6.i-csr.net
wwa.i-csr.net
wwg.i-csr.net
*.i-csr.net
wwd.i-csr.net
wwk.i-csr.net
wwb.i-csr.net
allied.i-csr.net
*.i-csr.net
wwa.i-csr.net
wd02.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
wd16.i-csr.net
*.i-csr.net
wd04.i-csr.net
wd10.i-csr.net
ww8.i-csr.net
wwc.i-csr.net
wd04.i-csr.net
wwg.i-csr.net
demo.i-csr.net
wwk.i-csr.net
i-csr.net
wd01.i-csr.net
ww9.i-csr.net
wd05.i-csr.net
i-csr.net
ww3.i-csr.net
wd03.i-csr.net
ajg.i-csr.net
wd05.i-csr.net

Certificate

The complete raw certificate details for xdc.i-csr.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XmYz6bfOhLTXT2wlTqr
Y53g40Fc74blYAceBqXPG4Fmiyn86TpxUEfgtelAHKXEdDtcytBg/CdNUzNOWOx7
NVklw2519LDTRI8NmYeqpIeO3mteqxHVJWUY5F4l0hhxxKhQXGeUj9/JOFtLS3fk
fVZrLFz5VwYhHxkIj1UdcPH5SuCn7IsEo/dwJqZvTg2DxoHtnNSeXzDFsRAFaLR/
ol6xATWH5G2IahbqlvCvas69piiU/aHfDygA052s9Td9dJDnorOyB4QzhYK+k4vt
d6ief+jISMOlcO3PWK9L45T6jJEvVEfyPRmoaHxDGn5/99wTOIyCxHxkIgGB9h15
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148134496369820589117457451356964272709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Windsor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Artizan Internet Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Internet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'xdc.i-csr.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28463580292685516264731173681851057671012653962590398020133147343641687074044587135719334564267404688067509248674899226357989872197994612532477455804826509184434157393658183757946191031677779844445292906481509899763139355380952407034761786638843597372739635744654916794983703567446094898053752767879473582346633980830125018946483806015790297070065315195492202957411973752113229539222340332809355791943724679943351789471662428032220424113575666221667166595397183027056052516923616065183819526992212809536248492856051372936961552006658543716661036560516392103237399554264684870940185957410312802603033753669575494170957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdc.i-csr.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019e9946d2e3c06bb820cafd7903fa81ea57569f14cd6144206d58d6101bf942f974424c84fcb9ea523da94639a3a392f6ed93a348b0826b3d956720bab349a2c0a1452dcf5cdf494fdcfc175ceaccc74b883f9ffffdca56024d74d8e00f3131d5c2f276a1bcb95a99fda1bb885ef18574fbc0f7b666b56bcf67f74bb1878c27b8ef95d0e4222ef2cfa107370fb9387a4a8de4975b744c8df8ea4b56ad99929c6a301632d1dbd9505ee8f1270f6110452448d3bdf26bf214168beb6234a226a517deef8cb80bcb530cda7d699554bbc6c65e51b7a0bae73330a89614884087888ced4bd001680a076257e5bf9d95b525b0ad3a413ddd05aed6abc7b55953d057d