shop.bodyrio.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3d:4c:0e:8d:fd:3a:7c:9d:a2:b4:91:59 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.bodyrio.com,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:4c:0e:8d:fd:3a:7c:9d:a2:b4:91:59
Serial Number (int): 18970532693761469434295521625
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5c:db:0d:29:52:96:40:10:ec:dc:4c:bc:d7:36:ee:10:e7:a2:82:51
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 9a:6b:cc:0a:98:6a:59:81:fa:be:97:49:56:b4:61:38:e3:0c:d0:fd
Fingerprint (sha256): 3f:41:20:f8:67:4a:fa:a7:6d:9a:a9:fa:c9:22:36:2b:8b:26:e6:a1:9e:4a:84:bb:e3:09:6a:46:9c:48:2d:48

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate shop.bodyrio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.bodyrio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.bodyrio.com

Other certificates including the domain name bodyrio.com

(limited to 100 certificates)
shop.bodyrio.com
shop.bodyrio.com
shop.bodyrio.com
shop.bodyrio.com
shop.bodyrio.com
shop.bodyrio.com
www.bodyrio.com

Certificate

The complete raw certificate details for shop.bodyrio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWkKSzBbFB6O76i1sFx
j7YMQk5ZGgcx4Ps6T6hhivJ4wzJogIeWxPPwOPbnTUGrXdJKk5TRHWxbZy1Uz6cK
YKInxylzd5CGW2Gd1c2//MxQ1DpKGXP/UauNQAR5YmFKbaPcy7DnysQiwqiqadMT
4U4fnjmLLOrjkPr+Zqydk/ndabXEmXo4QmZaakPmnX9WJuuc5b4g9dPR1n8ywr7S
piD3te9hapw6swOnsN/9C3EISKKhLYrNhbdCzc60uzdSB8RmyFuFSoDkcDFuiaeV
HwioYo8R96+Cy5ru8+8/65YAlfc3VB6gcU/UzYPciFbUFU1UcV3w4xFAS80ggtrq
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18970532693761469434295521625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-28 21:15:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-29 21:15:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.bodyrio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24942736930527650996319755584119045441643385781839378606964572315099974440355258916538699470813372731433812153869420632841691965750765731762459549991471659905010813054525292320159051485361043094646457412983796740984490883716673604658141222479658281551822606978282356023485346626554029553009237622318188013967817413492168486061966624386774330699811033245826817353330785782123387250253018826959790503315301010732045464218951189579773615957498140680945909624266384250026668140306035644228590919904471791722280459087309730408463751999821071266176765742851172526804158854038245619476538254128637880538680442464383914404391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bodyrio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cdb0d2952964010ecdc4cbcd736ee10e7a28251
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							0256007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b16c63eaa000004030046304402201f8f85a81d194ec45dab10e65c6c3eef2500db00c69d8658df015ac3953d37ec02203e9c9349d31a678d41fdb4b6ce4b5492c1aa60e7961348bb7e3f1013ab2f8be1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b16c63e89000004030047304502205f1dac8b554bf2ccf8f25db89a90854956fc4edc54d2ec28a387c1e0cac1e7dd022100be9efc360b916bebfa47d40c023f7f0ad341c45379591277057eef6d2bb13092007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015b16c63f3f000004030046304402201872b0ce6fa3910622218bc4c35a16f4c4fb46d4c16fc0f64b37cc94c65d7750022070e9ac83fd089ba68990ac454f344fc5559d21b74164361f11d01ff93e2245020077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b16c63fb50000040300483046022100c247ba196919075d5f4caa62dd3ab163c35b82202dab222d624fba27d5cd9a28022100aaa416df9b915ce0016014c878ab26e504a21ea6e047594d47e6f5019788af84007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b16c64178000004030046304402203a8f92d2ec6dd8d0559019f24e1abb1602a5810e672f3cc6f469a0d615a4c2500220241fd20f901a707be0c40b4d2a33e27641209962c67a24653d305399b806d0ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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