fitness.arsu.org

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 10:4a:85 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=wYx5CIKl2jnUXGiCxDEVQJRtnqzU2ToS,CN=fitness.arsu.org,OU=GT58782771+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:4a:85
Serial Number (int): 1067653
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 6f:e5:57:83:0a:26:94:48:68:3d:13:62:0f:c6:bb:4d:12:b6:9f:ec
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): ee:9c:4e:e2:58:88:42:e1:51:53:1e:9e:57:e9:bf:0e:85:29:37:27
Fingerprint (sha256): 3d:ad:be:7d:47:34:e9:02:db:9f:c9:bb:f2:e1:9f:60:47:4a:b6:9b:a2:f6:1a:11:c0:d6:b4:9f:94:7d:8b:e0

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate fitness.arsu.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fitness.arsu.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fitness.arsu.org

Other certificates including the domain name arsu.org

(limited to 100 certificates)
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
arsu.org
fairhavenvt.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
svuvt.org
sni44939.cloudflaressl.com
arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
svuvt.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
webmail.arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
fitness.arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
fhgs.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
arsu-dc10.arsu.org
fhuhs.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
fhgs.org
arsu.org
cvs.arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
*.arsu.org
ces.arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
powerschool.arsu.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
fhgs.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
fhuhs.org
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com
sni44939.cloudflaressl.com

Certificate

The complete raw certificate details for fitness.arsu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6Pcz+iYNum6rToWC03
yzInIK2SOyXPkOunR5RX2Uy8YyrTJIH3f3lkCMgFHutdZIJxnwt/0jqdhaxbvGdx
p4NwDzntc1ZprAXPnKdabspXnJOEfcY6g7WVDKrOnipnWJ+3X/S083zxyaWGuf2z
NXk/dEOFRd0kha/Ba78VvwfEGq7Aw6ttNq1Gw321dohY2W86t2ddruYOT0BJZwRY
FCLpkb3jJXC1uTVeiN9G0ZD6K3po0w8nwptAZyhqYB+PA6GqaSNIyhiCKt+SrTFb
gaNlrS7hWqOsiL8R7BOJ91uu3IWt0C/acVxKoDSMXdDJjrffhbbXIW2E+5qJ84tF
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1067653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-23 13:01:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-26 21:29:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wYx5CIKl2jnUXGiCxDEVQJRtnqzU2ToS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT58782771'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fitness.arsu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19053384239076439733909312625184553901897421758749234988422122804121263965968113476298219598631602359712905082972445051669172240097877302740456896689471458970328092725061037677064819863630287432259768735650969782433847647687620926653676593603503850476267831639387680557971890489869516864818834043708104924731673914834260958788349863282636747377397898753945672415704482364594567668677130843614936108835782030194794670347659036683347438832518185747659277777439131657191478928864259573396435922581959804624629125335184174977045181408993911141991915608137059894148728335140926421262733766819633321882514396542594718582049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.arsu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fe557830a269448683d13620fc6bb4d12b69fec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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