sslvpn.eldoradogold.com

- Eldorado Gold -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 6c:5f:74:8c:a5:30:b2:a0:7d:26:cf:c5:cf:30:aa:95 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Eldorado Gold

Organization: Eldorado Gold
Organization unit: IT
State / Province: British Columbia
Locality: Vancouver
Country: CA

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:5f:74:8c:a5:30:b2:a0:7d:26:cf:c5:cf:30:aa:95
Serial Number (int): 144052255648912397090692565521553992341
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): fb:42:9c:e6:2c:fd:66:10:c5:16:88:49:49:37:32:be:be:e9:c1:a1
Fingerprint (sha256): 56:37:e1:8d:3e:0b:7f:92:2e:d6:cf:11:4c:f2:32:37:46:bf:02:02:01:4c:9b:fa:27:51:e0:c4:b1:0e:6d:7e

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate sslvpn.eldoradogold.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sslvpn.eldoradogold.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sslvpn.eldoradogold.com

Other certificates including the domain name eldoradogold.com

(limited to 100 certificates)
servicedesk.weareavidity.com
*.eldoradogold.com
servicedesk.vretigas.it
*.gr.eldoradogold.com
fr.eldoradogold.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
webmail.efemcukuru.com
cn.eldoradogold.com
ictportal.linkfinancial.eu
gr.eldoradogold.com
helpdesk.bedes.org
*.eldoradogold.com
*.gr.eldoradogold.com
fr.eldoradogold.com
helpdesk.hambroperks.com
itservicedesk.eldoradogold.com
helpdesk.bedes.org
kmail.kisladag.com
mail.eldoradogold.com
mail.eldoradogold.com
eroom.eldoradogold.com
assist.pentest.partners
doc.eldoradogold.com
kmail.kisladag.com
*.eldoradogold.com
webmail.efemcukuru.com
helpdesk.actosoft.de
assist.pentest.partners
helpdesk.actosoft.de
strvpn.gr.eldoradogold.com
sslvpn.eldoradogold.com
servicedesk.weareavidity.com
*.gr.eldoradogold.com
sslvpn.eldoradogold.com
helpdesk.bedes.org
sslvpn.eldoradogold.com
kmail.kisladag.com
webmail.efemcukuru.com
helpdesk.coulisse.com
strvpn.gr.eldoradogold.com
mail.eldoradogold.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
mail.eldoradogold.com
assist.pentest.partners
mail.gr.eldoradogold.com
itservicedesk.eldoradogold.com
sslvpn.eldoradogold.com
strvpn.gr.eldoradogold.com
blog.eldoradogold.com
gr.eldoradogold.com
kmail.kisladag.com
*.eldoradogold.com
ictportal.linkfinancial.eu
fr.eldoradogold.com
mail.gr.eldoradogold.com
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
*.eldoradogold.com
mail.gr.eldoradogold.com
fr.eldoradogold.com
ictportal.linkfinancial.eu
assist.pentest.partners
athvpn.gr.eldoradogold.com
mail.gr.eldoradogold.com
kmail.kisladag.com
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
sslvpn.eldoradogold.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
eroom.eldoradogold.com
assist.pentest.partners
sdmsslvpn.eldoradogold.com
isovision.eldoradogold.com
ithelpdesk.archlynk.com
assist.pentest.partners
sdp.vdp.com
mail.gr.eldoradogold.com
assist.pentest.partners
strvpn.gr.eldoradogold.com
helpdesk.wentworthclub.com
kmail.kisladag.com
sslvpn.eldoradogold.com
helpdesk.wentworthclub.com
athvpn.gr.eldoradogold.com
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
athvpn.gr.eldoradogold.com
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
mail.eldoradogold.com
mail.eldoradogold.com

Certificate

The complete raw certificate details for sslvpn.eldoradogold.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAjNLLS45rxKxuoEepcX
2QDGvDkEGpJV7G+eDLCPHKuM72qgEDM06GKPVJnNrxBbqkygXu758bgZISxIGXsH
3UMolk6edlYFADtDIbINxJ9ZtAGfmJwBcVGxBez3uFSOsB/wXAKiS00c/n3YLNaJ
red4zGtLLQvbJXJPF+SbCBbEvK6ybYgrZkMPfDBaA+BewVihvCO3nNPWhTP/SnY+
LPbR+61ZDApdvNDncMa/a+IIhWMB9ykMalwuCFGR9pQJS7tJsTjjR4bZ5i5sMvyn
m6QjemGiAYbowfF7fHAaiunRT6TZcapz6VehM2HlQLxKk2DTbBFSl9qhzekWnQIU
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144052255648912397090692565521553992341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Eldorado Gold'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sslvpn.eldoradogold.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24747047936714377257703322024599897162218619741558253905153287764068780623405835904746025564397422796271589064566623454252301441715389083619855979776518594027040611475642635686113032609860438572652008534693852022685085562678149978242901367232183553404049275305003611520377494855526499240822770410918324785790582812322252381612116648996793990257682825412865545138270297420806977755523640722793753083624850322602711484903883209577856702389418244100247972426413628967331388754436762854429451556196474659842386036102445486059291777117114708205528845387799037598648099466446915127228969692218522139018524529223707060737051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslvpn.eldoradogold.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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