www.gevalia.com

- KraftFoods Company -

Issued by Cybertrust Public SureServer SV CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:43:c5:93:d0:fd:39:41:41 was issued on by Cybertrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KraftFoods Company

Organization: KraftFoods Company
Organization unit: WCC
State / Province: NEW YORK
Locality: Tarrytown
Country: US

Cybertrust Inc

Organization: Cybertrust Inc

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:43:c5:93:d0:fd:39:41:41
Serial Number (int): 20282409603675000639917724877121
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: 71:2a:22:56:b8:8f:e5:6c:32:2a:b0:cf:a7:44:16:35:b7:15:57:2f
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9

Fingerprint (sha1): 39:84:89:92:e4:a2:a0:8c:54:7c:0c:fc:0e:0d:d3:39:47:8f:d6:c2
Fingerprint (sha256): 54:09:39:c5:ef:1b:8c:7c:42:ca:fd:96:0e:33:bc:4d:95:95:e3:29:46:bf:d3:9c:69:06:1e:68:2c:eb:86:a3


Revocation information

CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crl

Check the revocation status for certificate www.gevalia.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gevalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gevalia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gevalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmVr06tRYLJaY7NK5ru
1NVr7TyCGdHgOpDEadSDfMUP98CqpowYzX7jGEb9jlMvt9M7ZQhcgnY+SkBH4jv1
hA8JMtKS9KXiD1AkTdxWUEbBUb9QJpoGPlF8cp4rUDnxqmqd7hAEQAUWkS6tfIQd
m4K18nft/x+L+Xfu9/F5N99kNFIaJ81uhI5DrGS1lmG6YKxQ1AB1qQwWB4KOB3aa
n6DNLxiQaaYDyZ+B8vCHod9ZjdhFBuSSFRw2PQvd5fNNbxvgT2jYVcmJKSiT/moK
e321Q7AJjq+4Ha54lnofxKgIgwlZBk/riHXWT6CEDADzyPAg/jVRVQG8CBcXlGKS
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675000639917724877121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-24 18:53:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-24 18:53:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NEW YORK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tarrytown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KraftFoods Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WCC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gevalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25528533680120949303236413689254692577037107757185262195343581965359233433186676965586726012043840552394539720955604299865399292777150722123390638977361927050534375110168169186406167289730090112640044334804288040055508162338686383067995215404405797317247585738610426796251544262079396080127810225561366482097349023687282106887694571008333872339879773154065379672192667021422569944259786206652997396088133580642239856876122979106421494355204685385469709418678420589816480653708958539140806186242769124294066686077183831864961939488449082220919470421614628649366009531654976934612065296694285956387003044459852421305077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							712a2256b88fe56c322ab0cfa7441635b715572f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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