www.namebadgesinternational.at

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 02:cb:44 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.namebadgesinternational.at,OU=GT95325499+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cb:44
Serial Number (int): 183108
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): d9:74:89:f2:db:11:aa:c4:ee:c3:a0:ba:41:ce:fd:d1:b0:83:7b:1a
Fingerprint (sha256): 49:cb:bc:5d:2e:d8:9b:60:09:c3:a9:9e:95:d9:e6:ce:b7:4d:aa:f0:f6:d2:55:43:f5:cb:65:2c:6e:f6:f2:52

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate www.namebadgesinternational.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.namebadgesinternational.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.namebadgesinternational.at
namebadgesinternational.at

Other certificates including the domain name namebadgesinternational.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.namebadgesinternational.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-05 10:34:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-06 02:27:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT95325499'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.namebadgesinternational.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819210023154051929678242873302132602693761935393926230417572269387684370591875501662021405342180136727355117156608371224694855641182802649462043414820720688020737062901957503653466672080695312161714510229441087605017960276730093750671826417677303363218218340828937223795168707870335400447092204253003603163599088964526952782715334516729220579368614773835056323778688711415491524038905434558854717712481884617524254434985686695029685630234689774713946424595777702056358130269358132643310118728260493121931082949647497403245660766169948243446709379045638732695388596184508670613419129722904528380446430389484065023296142657171037112494945364997011080714980861618483256647678434911757626433151924339478713854819244346694545846406198171371574871483418364717920278413887568176668801844633048146827759882139477664646444949969995059450932646412728095351122016533099617494636823430152440341958557062419855596708940510886373248759948194818837737669780699817980794540902797139314937589008761574509843022636579870773508573970805590039580584720548917027242719381573437684292082453064640092855036363358193816724705327227718010928271395112853990716409323618705265574222207954632486533208106756444449714356548915401168975730780628756901788920312187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namebadgesinternational.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namebadgesinternational.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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