members.asoa.org

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:42:89:fe:fd:3c:3f:86:b0:9b:39:8a:ba:b6:90:ef was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=members.asoa.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:42:89:fe:fd:3c:3f:86:b0:9b:39:8a:ba:b6:90:ef
Serial Number (int): 18954682426093642773781276377889542383
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0e:ad:00:ae:4b:44:66:68:75:8f:ff:6b:eb:6c:55:87:3a:49:e1:01
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 2d:e0:a9:a6:a7:6d:c7:1d:7a:83:51:e3:31:4b:61:a4:42:f8:c7:3a
Fingerprint (sha256): 44:3e:93:ba:e1:9b:8c:dd:ce:73:02:69:cc:dc:14:d8:40:3f:0e:40:3b:a0:4a:6c:59:b7:00:7b:38:ba:5e:24

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate members.asoa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for members.asoa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

members.asoa.org

Other certificates including the domain name asoa.org

(limited to 100 certificates)
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
india.polo-development.com
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
go.rescuevocations.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.frailtycertification.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
members.asoa.org
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
asoa.org
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
*.asoa.org
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
community.asoa.org
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
community.asoa.org
members.asoa.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
community.asoa.org
www.summitmortgagetraining.com
careers.asoa.org
*.asoa.org
*.asoa.org
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5727950116749312-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
uspa.polo-development.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
community.asoa.org
5645478960037888-fe1.pantheonsite.io
ukraine.polo-development.com
www.summitmortgagetraining.com
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
members2.asoa.org
shop.asoa.org
5704980631650304-fe4.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
members.asoa.org
5704980631650304-fe4.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
5645478960037888-fe1.pantheonsite.io
community.asoa.org
www.summitmortgagetraining.com
members.asoa.org
5704980631650304-fe4.pantheonsite.io
www.summitmortgagetraining.com
5645478960037888-fe1.pantheonsite.io
5704980631650304-fe4.pantheonsite.io
community.asoa.org

Certificate

The complete raw certificate details for members.asoa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmNUiDW/oIxMDSVTROR
a1EreHaEubSbVI8vcbPKtbmp/cI2w0EeuEQNd3/T1nXFoDe0NKtQc7j32eoNATEu
8o3jR2HLMYhjRC9VB+0Q4CV9TtV5VvLZr7SrOlhbAdyTpFfkzAkKigalpkyqjdjr
tOtMV6CtvvPCZYwPo5bsBmXVJ3/wVieZFt8YmobxjytxF3oJM3HbF7yDhZGvZWCP
M0uX2c5o/Hs00XzRBBN8kyOCKeLCgZvNz/kCBFz1ZIwdBt1LCd8RzTIO2J8ESJps
8tsDBrfLyW4NX+JHHIdGb2xp1eHNG/wWEEGcb29CIG0n9Y87RGl9PjLR67gb52fc
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18954682426093642773781276377889542383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'members.asoa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20905039649674260000923954980561403949684081203903467536705820598955692891772962786145957248365234601321806596535246632314012338824729438151831947388131960760722412535242427035978625171586866846219054226140859300964890576054616148645441918363253831842339001589721848937153941253400901160201516796447600546588593173058255407988548463879284775733250960703857021097251198875874698697751628196984012265459436228891959136948213072298497978016823591831533212181975624790257287633465588880329997612808707952746768914722634160352774429929384654672624407889455925552782862316130598804875551880798743431782155081254513173584939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ead00ae4b446668758fff6beb6c55873a49e101
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.asoa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004813e4c068420088bf82b93e195208950d61d37a4d1288513776d0eeb088191fe86dfd4d172fc94d310d04b9fe44b1ccaaa54d6352fd24e8adadc663405f696147d7774d4691f6fc47f09e5fe5e8c1db11a3a4f1b63111e1cfdbe5a6b4922fe0659f185de55bb5dfeb640550cf71de0f5ef1767999e1550fc641c6a2e3c0b99ef1fc0c5fca18b39ad8cedb2999b213dc5c3ba4cf8a78c9870fa40ecc8018ad9d371b456ddf31f7f2301112c32c8f2594550c393b099d434f8736a3b100ed43643a21aa8410cc9ca02f6aa7bd228724bdacf8426c5d9023b0b1236900faa6e3444c3e3f6c19c2e4ef861e317ea7e18d519ddf570a43345e63a148d117d2827e43