mail.rdek.bc.ca
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 61:bd:fe:75:1b:bc:0e:98:38:ae:95:6f:31:b9:de:ff was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=mail.rdek.bc.ca
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 61:bd:fe:75:1b:bc:0e:98:38:ae:95:6f:31:b9:de:ffSerial Number (int): 129921620707717706027060822436063338239
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): e7:20:26:d0:56:65:17:5b:ba:7d:72:a6:cc:c0:39:75:2b:bf:7d:db
Fingerprint (sha256): 4a:03:78:45:ec:9a:32:66:68:bf:32:aa:7b:8a:41:4d:d6:6c:c4:ce:fa:96:41:cc:25:f6:b1:0e:27:5e:e0:8d
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate mail.rdek.bc.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.rdek.bc.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.rdek.bc.ca
Other certificates including the domain name rdek.bc.ca
(limited to 100 certificates)
*.rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
secure.rdek.bc.ca
secure.rdek.bc.ca
engage.rdek.bc.ca
helpdesk.rdek.bc.ca
secure.rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
devopshelpdesk.hcss.com
sdp.tianjinjuilliard.edu.cn
rdek.bc.ca
*.rdek.bc.ca
mail.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
mail.rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
*.rdek.bc.ca
rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
commissions.rdek.bc.ca
rdek.bc.ca
rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
secure.rdek.bc.ca
secure.rdek.bc.ca
engage.rdek.bc.ca
helpdesk.rdek.bc.ca
secure.rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
devopshelpdesk.hcss.com
sdp.tianjinjuilliard.edu.cn
rdek.bc.ca
*.rdek.bc.ca
mail.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
mail.rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
*.rdek.bc.ca
rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
commissions.rdek.bc.ca
rdek.bc.ca
rdek.bc.ca
Certificate
The complete raw certificate details for mail.rdek.bc.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQYb3+dRu8Dpg4rpVvMbne/zANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE2MTIwOTAwMDAwMFoXDTE3MTIwOTIzNTk1 OVowGjEYMBYGA1UEAwwPbWFpbC5yZGVrLmJjLmNhMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAvDtIlF/O/7FdusBi10B+lyquC6IzDHmjjoQjxNM9R+Gq oblx53QU543rlPmzn4PIX7crtVGrh/KqXuCPDQvUUf9hx3v5pIZDprKjiKcMfqZa LEdfQOLXv9VvpvSoDaQYlKGAptB+C7Dw4LcLPUZIvIJNKViOQ+E4Ka90ySOzG/yE 4Q64ExMsyX+2SdHX1V7DsG17bhvqt8Ov+y8dq3KYjq/Uwuxw9/nlKE0cHRD9pSyX pVSz4PR2jcvBK9DBU0wCpe2HtVaAqJg2wMNmBA98OrpWt5oncbkd9yMqQeiYLg1R 67GfU5b+07QnWpLxpwA301P0o8pYOKlO8nu/ZRs5AwIDAQABo4ICejCCAnYwGgYD VR0RBBMwEYIPbWFpbC5yZGVrLmJjLmNhMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0gBGgwZjBkBgZn gQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xl Z2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdh bDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVjkeveNAAAE AwBHMEUCIQDc9zGnCUIG4xIAGGXTqAF02OTyySfHUbcjhqSf/FDydwIgbPfTbk7l ulI1rSyakA3uvsCfj4v/50XcfQYGSEOqJjcAdgDuS723dc5guuFCaR+r4Z5mow9+ X7By2IMAxHuJeqj9ywAAAVjkevfRAAAEAwBHMEUCIQCt9fOizWOq8NZGYdXKpgTC iro4YwX6xpCYY/g8cr/M5AIgW2w2iFKe+a0RVGExOT7+6fmt67zyIfBPCIEGumlm H6UwDQYJKoZIhvcNAQELBQADggEBAG7R4CmbOvqV2tK+8z8nNaKFdzID1dpnbjBg nvsNIUn0kmqYLEIbshYacnAdf6mCwsN//Dr47qpv1NdJ6VlNyYplA4rJ1EY60eir TYZIFYmdqb30ElgrSrPalVlzaoFMq3yOkrdEhWsE+CU9UnygYnuqkHeC+hZR+OyC +biayYF1ZTkNR3Ai5PZjkSFD5OYnv4153PmuioG5nxocgYKRiT5pavmctpskVbnI 0FTJlumoNlslBd7K1rNe1QFuc1U4RC/f5iM7NQjP0WzJQi382bVxb42CmEgNcwbk 9YUNfYkGL5RqmjOEhGI50f4b/QowOJWDlwAlDx+KzWW/IF2huZQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDtIlF/O/7FdusBi10B+ lyquC6IzDHmjjoQjxNM9R+Gqoblx53QU543rlPmzn4PIX7crtVGrh/KqXuCPDQvU Uf9hx3v5pIZDprKjiKcMfqZaLEdfQOLXv9VvpvSoDaQYlKGAptB+C7Dw4LcLPUZI vIJNKViOQ+E4Ka90ySOzG/yE4Q64ExMsyX+2SdHX1V7DsG17bhvqt8Ov+y8dq3KY jq/Uwuxw9/nlKE0cHRD9pSyXpVSz4PR2jcvBK9DBU0wCpe2HtVaAqJg2wMNmBA98 OrpWt5oncbkd9yMqQeiYLg1R67GfU5b+07QnWpLxpwA301P0o8pYOKlO8nu/ZRs5 AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 129921620707717706027060822436063338239 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.rdek.bc.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23762035123936337455108920575953100455936482358618956612789679622201243122453801879963144818298444972383492958855102714210077729592606273290255889506121667454389209239750478931484607341455221308751474743952690187369014712570405400002450202696197731510142909633938536892926358390918534907834907339672574011127636145810773233500488827581633857642591577709009812138554173603751457314809681604026069689382352046867630615502088946861527491298385657393273205724673032640340199591733780444897316131721205328395438453283442463623873658306969815516949580368178983389893540190732727609784285585381232483681343873049446793820419 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rdek.bc.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000158e47af78d0000040300473045022100dcf731a7094206e312001865d3a80174d8e4f2c927c751b72386a49ffc50f27702206cf7d36e4ee5ba5235ad2c9a900deebec09f8f8bffe745dc7d06064843aa2637007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000158e47af7d10000040300473045022100adf5f3a2cd63aaf0d64661d5caa604c28aba386305fac6909863f83c72bfcce402205b6c3688529ef9ad11546131393efee9f9adebbcf221f04f088106ba69661fa5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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