www.gevalia.com

- KraftFoods Company -

Issued by Cybertrust Public SureServer SV CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:3d:5f:32:48:50:a2:8f:13 was issued on by Cybertrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KraftFoods Company

Organization: KraftFoods Company
Organization unit: WCC
State / Province: NEW YORK
Locality: Tarrytown
Country: US

Cybertrust Inc

Organization: Cybertrust Inc

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:3d:5f:32:48:50:a2:8f:13
Serial Number (int): 20282409603674539476666233818899
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: 63:48:e8:f3:ed:34:cd:c7:51:a8:ad:bc:3e:13:64:d5:14:59:2a:35
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9

Fingerprint (sha1): a7:f6:0a:83:c2:12:24:b2:81:8e:9e:0a:5e:92:80:ef:8a:1f:68:47
Fingerprint (sha256): 36:ac:f3:b2:ea:c5:4c:5e:1e:11:1a:4c:15:e1:32:f4:4d:0c:34:cd:e7:1d:ee:b2:48:29:7a:99:35:e3:59:28


Revocation information

CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crl

Check the revocation status for certificate www.gevalia.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gevalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gevalia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gevalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwrB3bUd3+eRb+zOwscP
l4bAzd9pzpfime+CJEF4048U+Lj0I7El8MjtBKbHMvVIdVgXW/HBpOoP+S9zPq2E
WZjuS3QtCRX8p1xtva9lT/8ZqENZz8XNloiFbbyKG5grRTaGS5XI6sMprgGQKud0
i6EEx+OwdZx6tbv3BLnSx3uWnXXWI9PdjDcXPOGjQjxCeruO27V+BxLrBXvq4w1l
jtFAJX3sBxib3GdL6qMM06J0K3WTC9Uw7KBLhR7rsm53UoqrFaecgTST/ujc138j
/Og63pmpdRhg3UUvQkAzrOph6iMxWQy4tqrYz08hbNvY+eiXlbU3Rj/5ZkZXJdgd
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603674539476666233818899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-12 14:57:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-12 14:57:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NEW YORK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tarrytown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KraftFoods Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WCC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gevalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21592054766224957520016241219480752356839744415029941931921921721772500821189543424753768039823332602516176691199585377652558539812254041300979958221907819730742734709609057556597511985568497594842076495888381532691037008118703979559582073100817155956517240324199050352198535744268116164990384531226355882056639628540486708229010345707602373123087033144443700998429849732843207050996165737706026125624030293377653329733274760375453672110049649805715866317782894413346589881772291284759264508116978842124173410297776688176602475098697470512816792665695652205637672127301853068220942130642818332176130264389530152344991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6348e8f3ed34cdc751a8adbc3e1364d514592a35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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