members.costcohealthsolutions.com

- Costco Wholesale -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 15:59:90:de:0b:cd:63:b5:1e:cf:ea:1a:23:7c:b6:7e was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Costco Wholesale

Organization: Costco Wholesale
State / Province: Washington
Locality: Issaquah
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:59:90:de:0b:cd:63:b5:1e:cf:ea:1a:23:7c:b6:7e
Serial Number (int): 28378840591180472753561683322524710526
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): d2:29:9f:48:d0:4e:8d:36:fa:50:1a:4e:b0:a6:8f:53:a7:85:97:31
Fingerprint (sha256): 39:0f:16:3a:11:33:fe:e5:7e:9e:4b:a8:82:1a:ef:8d:63:b1:dc:60:b8:ac:53:e8:a7:d7:f9:b4:ca:c1:1c:86

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate members.costcohealthsolutions.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for members.costcohealthsolutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

members.costcohealthsolutions.com

Other certificates including the domain name costcohealthsolutions.com

(limited to 100 certificates)
members.costcohealthsolutions.com
www.costcohealthsolutions.com
members.costcohealthsolutions.com
www.costcohealthsolutions.com
costcohealthsolutions.com
www.CostcoHealthSolutions.com
members.costcohealthsolutions.com
www.CostcoHealthSolutions.com
members.costcohealthsolutions.com
costcohealthsolutions.com
www.CostcoHealthSolutions.com
www.costcohealthsolutions.com
www.costcohealthsolutions.com
members.costcohealthsolutions.com
www.CostcoHealthSolutions.com
costcohealthsolutions.com
costcohealthsolutions.com
members.costcohealthsolutions.com
costcohealthsolutions.com
employees.costcohealthsolutions.com

Certificate

The complete raw certificate details for members.costcohealthsolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHAArrmMeQQEaCcFrAb
bVnvcRwiDTdcVOWcnPwIzagB2MuQyPKpvR4Z7Tg4/n+SNPNj/rKAuIw8qSG5agwF
rIpAhcDliiSpxnmqtcJ/sZz5YLmuxYfKzbMOgHnPNLUH2De46iT6NYdcl96/pfnp
iZAVuDsMZukiTdRhpX0iJPyWHDHS6slbiPZw9S1VLpUJf3R9kGoOx5ppI13pCXel
CSKY1h3xV1U3OTPGzm7jpfC9ZK9tdtM5eT+3+0vYs52MvT6j+i1IDQmR3QumsJ9W
U8goWZttXO8IpWPBQTdOWQZ6kfFyon+Rn832LEY+LCW0/CnBLOIsqchcXzPBt0iO
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28378840591180472753561683322524710526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Issaquah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Costco Wholesale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'members.costcohealthsolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24072929755920304599364101770587757086638176017965840873030159387726777869927220099692256735059689476910804321252222798939665626646827918760588098345457733966995720895781494776358420898399245853231077453814109897720016007445363189857035976558921395222935877647954518920938154304894097778265355676892226762865012426937142618422777547506440277386056803785722634934169309134012851707461289791790642883862810094373627732434356886311078737268278196329195900182668854970936124794993005612988134210721442327152181914289015872886935487356224813379911049839624195821099477859480255306507482927246094611178962824901580548509407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.costcohealthsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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