refer.gevalia.com

- Gevalia Kaffe -

Issued by Trusted Secure Certificate Authority

About this certificate

This digital certificate with serial number ab:95:31:98:ff:51:98:a4:ae:8c:0b:d2:a9:ed:f1:6e was issued on by Trusted Secure Certificate Authority.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Gevalia Kaffe

Organization: Gevalia Kaffe
Organization unit: Refer a Friend Program
Organization unit: Provided by Kraft Foods Inc
Organization unit: Enterprise SSL
Address: 800 Westchester Avenue
Postal code: 10573
State / Province: NY
Locality: Rye Brook
Country: US

Trusted Secure Certificate Authority

Organization: Trusted Secure Certificate Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:95:31:98:ff:51:98:a4:ae:8c:0b:d2:a9:ed:f1:6e
Serial Number (int): 228072645470910906016612781516156432750
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 97:33:95:56:27:99:44:c1:c4:e6:dd:bf:30:bf:88:ca:a7:c6:24:9e
AuthorityKeyId: cc:03:5b:96:5a:9e:16:cc:26:1e:bd:a3:70:fb:e3:cb:79:19:fc:4d

Fingerprint (sha1): 7d:57:c7:23:ce:57:e8:78:49:27:43:5a:ec:48:4d:97:5f:3a:59:3d
Fingerprint (sha256): 45:0e:d4:21:dc:81:bf:14:54:7e:64:bb:f2:66:ab:ee:ab:46:42:25:f0:3c:55:3e:3c:08:65:d8:f2:ae:dd:5b

Issuing Certificate URL: http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt

Revocation information

OCSP Server: http://ocsp.csctrustedsecure.com
CRL Distribution Point: http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl

Check the revocation status for certificate refer.gevalia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for refer.gevalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

refer.gevalia.com
www.refer.gevalia.com

Other certificates including the domain name gevalia.com

(limited to 100 certificates)
help.gevalia.com
dev64.gevalia.com
onfarmchat.com
gevalia.com
www.psglogin.in
gevalia.com
help.gevalia.com
gevalia.com
media.gevalia.com
www.gevalia.com
www.gevalia.com
gevalia.com
www.gevalia.com
cdn.steviewonder.es
gevalia.com
www.gevalia.com
lingo.mx
help.gevalia.com
help.gevalia.com
help.gevalia.com
partners.medics.academy
refer.gevalia.com
gevalia.com
www.gevalia.com
www.gevalia.com
gevalia.com
api.gevalia.com
www.gevalia.com
www.aafricaservices.co.za
help.gevalia.com
foamathome.gevalia.com
gevalia.com
www.gevalia.com
gevalia.com
help.gevalia.com
help.gevalia.com
gevalia.com
www.gevalia.com
cdn.steviewonder.es
mossdev.gevalia.com
media.gevalia.com
help.gevalia.com
kaspero-backend.elliq.co
www.gevalia.com
egt.sevenlynx.com
help.gevalia.com
help.gevalia.com
help.gevalia.com
help.gevalia.com
www.gevalia.com
refer.gevalia.com
jojokimys.com
help.gevalia.com
demo.cao.app
www.gevalia.com
help.gevalia.com
gevalia.com
www.gevalia.com
www.gevalia.com

Certificate

The complete raw certificate details for refer.gevalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UoiFVhHomKUHcbEQdYA
1eWq5LPItlzKwEpEDRpVFxMgSG6EIQbxJgktFd0NiIAFOhSgjZLrExiOFmfX+ekA
7NNlLU2aeKHjCfwdo18nw24izQo8valF6EL2eJ6kl7ridrYKdtwwIJjgwbHZfMFF
qJUUMmDo7c97MlhMKYmntwqAcI9/s0JrtPLSA+FBvoPcPTcwSz3hMACGmyU8hpTC
xhJW+pdTdeYHYlkLDqyVhZNqHRskkRkNGM+305DuyEVEFwB7Yk3qRfFZb2s0lkqn
qJK0zZSjCsdzpcPW5bgNYdogbylFNlmTtaGfux0D8Y5kjT9Ij/gNN0/0UmBeen7i
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 228072645470910906016612781516156432750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10573'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rye Brook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800 Westchester Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gevalia Kaffe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Refer a Friend Program'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Kraft Foods Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refer.gevalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30964941129605203855475815408833848150738752129761756308501922605768625268095961393791758472977868649600389790789860821962714942468244749189531051753923526204829212033649205248363798246222902309120092885967160143189116301624867856515243749051972967460547616663072184312299780389732994561910807659202989881502892620891109244808559273503751871084990959465432255744279704122558667504623924324307270504480018103161033858399120358477719880863702015889871045048419994741122111210800891092823208344447055088266557406018844351941895814792343822591634370180201062728716723609506935197779636398557556687960486294427050472038941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cc035b965a9e16cc261ebda370fbe3cb7919fc4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97339556279944c1c4e6ddbf30bf88caa7c6249e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.csctrustedsecure.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.csctrustedsecure.com/TrustedSecureCertificateAuthority_3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.csctrustedsecure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.gevalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refer.gevalia.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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