geadditive.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:5d:3c:1c:27:d4:1e:7e:69:e8:ed:d2:8d:2d:4b:8b was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geadditive.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:5d:3c:1c:27:d4:1e:7e:69:e8:ed:d2:8d:2d:4b:8b
Serial Number (int): 20422522719908598222343941016341269387
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:8b:76:cd:1f:c5:82:10:30:ba:55:93:96:ad:db:7a:19:cf:48:59
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3b:33:97:a9:ef:1e:1f:03:de:db:35:d5:7a:71:58:51:0c:c2:70:0f
Fingerprint (sha256): 4f:0b:1c:b6:74:2b:75:41:8d:cd:26:f2:68:bb:a1:cf:05:a3:68:26:53:61:88:f2:e7:e3:1c:4d:bf:e9:72:95

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate geadditive.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geadditive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geadditive.com
ge-girls.com
smallworld.nl
ge-smallworld.com
geenergyfinancialservices.com
smallworld.de
ge-smallworld.de
gesmallworld.com
smallworldwide.com
gesmallworld.net
smallworldamericas.com
smallworld.co.uk
geoilandgas.com

Other certificates including the domain name geadditive.com

(limited to 100 certificates)
imperva.com
incapsula.com
www.general-electric-company.org
www.general-electric-company.org
geadditive.com
aaf.gecompany.com
incapsula.com
incapsula.com
imperva.com
beta.geadditive.com
imperva.com
incapsula.com
imperva.com
geadditive.com
imperva.com
incapsula.com
*.smallworldwide.com
*.smallworldwide.com
redmine-geonx.geadditive.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
incapsula.com
www.general-electric-company.org
www.general-electric-company.org
imperva.com
geadditive.com
imperva.com
incapsula.com
www.general-electric-company.org
imperva.com
redmine-geonx.geadditive.com
incapsula.com
incapsula.com
imperva.com
www.general-electric-company.org
imperva.com
incapsula.com

Certificate

The complete raw certificate details for geadditive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/RWFSvLyXqVdHn/r9Ig
O/lmzAmv2cdQIc4ekNefIvVJ2+tpwQNQTOw3wJf9U7XPqlB/0Z4+TPXNnzzsGgJp
JZYrtcAiLGUnA9/XYICVKZJYTdXqNvmtUG1s9vWpgJsOVDr/sVnM8D6snA+9FMXc
CjdRIsW1YTslkPU1QzhpJdpIQ7s4zpTDvSUEsUBrr7Kv2/omWvvcPh+YzK6KQegd
URrR3euDAUMCHYXmrxv19sMyHU9OL4duaJ4wwnzUXkMjLCj/BpQPTF0hIOdVaDQd
3d7pIG0Hz9KXyJZlfthB6ZoPckONjeh3ODAzWnq1wbxH0MzaVWeN5f+HmGRzXwOg
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20422522719908598222343941016341269387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geadditive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24736956169057010744241703262235894794948841614398335163844576134892455360087862627177962751731485618926718612088359770491241399323630673405001972975806289528596697006040606839693033152701111947119960845029324548166405367998909622019324202558507369573244605403869014078363153907691966346667832595593959455034475403084650390996588010400767741498872042188132179175159629953964519382540234775262644714753745818302234542755711685130532548677065177391891834570037776694492749880049010720497059520177723553185187084821662172128250130933812579765612304961175343457808847155938341635109338891741972179526694676055591271768209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e8b76cd1fc5821030ba559396addb7a19cf4859
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geadditive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-girls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-smallworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geenergyfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-smallworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesmallworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesmallworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworldamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoilandgas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:9|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 41051852148486975036749746894360503233062719547925060510812949560049153883731
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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