www.mightyblue.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0d:af:58 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=LMN1D6Qd3JeObU6L4vmJQKVjyArj6BFD,CN=www.mightyblue.com,OU=GT49031386+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:af:58
Serial Number (int): 896856
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 0c:bd:40:f9:31:ab:fd:e8:33:c9:5c:f8:49:db:15:d5:37:8f:5c:48
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 90:8c:49:ec:8b:dd:9f:dc:66:1b:0f:af:1d:46:5a:47:7e:56:d5:35
Fingerprint (sha256): 51:dd:63:d6:5a:77:42:ab:cf:42:36:89:81:24:fe:6b:db:89:c4:bb:e0:eb:79:bf:6e:d2:2d:66:67:d8:1b:ba

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.mightyblue.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mightyblue.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mightyblue.com
mightyblue.com

Other certificates including the domain name mightyblue.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mightyblue.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 896856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-25 19:11:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-29 06:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LMN1D6Qd3JeObU6L4vmJQKVjyArj6BFD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT49031386'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mightyblue.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 542718258235912020597947297180319378948569023817022464414179712554940045466952359602575195428888745760923168438236715793243070511865312044347477953809852504315407287268055198544411278089982179088214762998587329133735569987809465003141483423841518518215835479821642879905165815453667938692895933200171838935660316131949295164549734303787772309640296607196465200057096639740383945324369626541762946349108090203423199827634941225732164460571515891721774643875595870205678642470284197305430016724866208809569437902039164292210276803450570163355167946209356311337791417833671156984894000147625172535018107561668508615857345124849850376277965307705690550449945963666607494209315486238898380588053331017745212843256757475569707153651799355493488675602601645655079899447199297415000044504503933440566352685472194893156868137436479672222467075817723312484947493049817723327104580959417712330426250214981969849960393644238227381670887242240290126150486004402925056050898905117115962882165045565965484008135998183436756986140387171426667512660369202835524545396239104550069033221445590658535081316725456469595682322653461619457542917407927879849896415236261941081174308658290346116526850769527501381792298922177658106469936755024945706624247349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mightyblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mightyblue.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cbd40f931abfde833c95cf849db15d5378f5c48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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