www.strategiamarketingonline.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0f:7c:65 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=rrfvlpMXQgnox65duDp85rhloCdQv1zX,CN=www.strategiamarketingonline.com,OU=GT33545377+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:7c:65
Serial Number (int): 1014885
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: da:67:de:c2:46:63:8b:ef:c8:0a:41:17:33:2d:f6:9f:73:42:90:4d
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 97:01:04:24:88:e5:4a:ac:ee:5b:fd:c9:df:20:63:5f:df:3f:74:1c
Fingerprint (sha256): 3f:29:78:54:80:27:bf:3c:f8:35:25:24:a3:ab:03:70:79:7a:ce:8f:7d:c8:ac:ab:d8:bd:8c:39:1c:a5:b6:c9

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.strategiamarketingonline.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.strategiamarketingonline.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.strategiamarketingonline.com
strategiamarketingonline.com

Other certificates including the domain name strategiamarketingonline.com

(limited to 100 certificates)
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com
www.strategiamarketingonline.com

Certificate

The complete raw certificate details for www.strategiamarketingonline.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1014885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-05 16:15:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-07 23:34:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rrfvlpMXQgnox65duDp85rhloCdQv1zX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT33545377'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.strategiamarketingonline.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946250707240101556033363952611921370538635186039442306620417100696277437323284968139518500787375720919030042414740318278883756728465572353224742096506350880697010620518029904276080275759907087920890024181165283969222805998019466186324145365494812221395265422015101394352132816497176915240527449379313466473709484280023117697773783707087919567437333185040903693523298585965818681036380344495613101037022885673809695478289544700806268045650563195759474903358002141023584200323241622345461245826608751593283241189934383054782085322691615654581339612628506229769320995523959446859404184175898698410628467205728834138859106397500634049791224654732713427260859347978391747670305604667881522718419504114941054265785689239401889826618707522846293300566261071564812375006885327510478572669069110657015072345117986815851091903170557897204818207343708218091203970031164606561091636224785144189137598429517140897771303237236347958878042455153945594153835338700311878812238705442464282733591327863985258142726664366136198755485791650981105228968146815534856949527972006999586615619352156400416856125678432648794530605055430662066043375526982921023610426865093175622164606214526749505686824746475356033436266171686247746966040525320798830291353847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strategiamarketingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategiamarketingonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da67dec246638befc80a4117332df69f7342904d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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