*.kennisnet.org

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 6c:40:1f:c8:3b:5e:10:59:de:c8:d3:7c:82:2f:1a:04 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.kennisnet.org

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:40:1f:c8:3b:5e:10:59:de:c8:d3:7c:82:2f:1a:04
Serial Number (int): 143889575162420691118668171424060873220
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): f3:40:fb:ab:25:66:82:3c:c6:a7:d3:a5:fc:5a:13:02:41:0e:9f:51
Fingerprint (sha256): 38:6d:c1:ad:53:2b:d2:e2:e3:82:0c:3a:a7:f4:12:cb:3a:d9:9f:ea:87:f8:a5:15:7c:c3:2f:76:8c:3f:b7:c7

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.kennisnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kennisnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kennisnet.org
kennisnet.org

Other certificates including the domain name kennisnet.org

(limited to 100 certificates)
webmail.kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
mysite.kennisnet.org
*.kennisnet.org
kennisnet.org
titaan.kennisnet.org
samenwerken.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
kennisnet.org
hotspot.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
fs.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
webmail.kennisnet.org
*.kennisnet.org
vpn.ka.kennisnet.org
support.kennisnet.org
kennisnet.org
kiwi.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
support.kennisnet.org
support.kennisnet.org
kennisnet.org
donald.kennisnet.org
kennisnet.org
*.kennisnet.org
support.kennisnet.org

Certificate

The complete raw certificate details for *.kennisnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpFYDb6yta6x+QlZCHF+
AkOQG40X5o9bj1AR3SxylcPmHiHBCva6x0cdpnTl/WgeMXFXj5IEKYgbnqTkQTkm
mXfZm6cLImwt+C1Vc+8X6cIC/mxBXJnFL2G1mG/3q/piqGDBGuJyporNZA5XdGgk
oJ/SSr4CRSByfAjoesuKpaHlU1qW+9+wkZSCR6z3AU6Ap3j7x3ypTvnUlo2tnP9c
8XT33LgSi5+rxY7Gn7OCMjw8L66JiKB3415mCK4YdHcpFbaTjtcSE7V1aoFm/+WQ
nDCm4gLLN6DqBamNTGzRIbf1JVXzaEzEaxMYOUB3XBMcJaSsvnZQx8RluvtLX6vm
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143889575162420691118668171424060873220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kennisnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20017323962424234537595762502229157733309269003029140138875343343491478268757829194374822333260622860109616094587749846546797018528750303905410088181441940948952915930647701800363794836265109387544281248293046689167392752438355117233956244309875189803943857115838268675851309025661731470547236534508099557240217058006514953262741808389025998995926392449606782554194085502302152035706181294681626110039367581747758832234670769023310230849909287423100402489999404771534959416273609179831224471872491939566553004978352307352693526873782348714991926143033714558041315439699382461941219964817385098446547858242166613337663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennisnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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