netnation.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:27:c5:a5:1c:03:c1:31:41:d1:1d:ac:d2:b5:29:b7 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=netnation.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:27:c5:a5:1c:03:c1:31:41:d1:1d:ac:d2:b5:29:b7
Serial Number (int): 20144928230265449981579779580116674999
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:93:fb:3c:de:0b:26:0f:f8:95:a2:ec:8e:7b:1e:10:e2:e4:d9:0c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 33:55:f3:f8:62:ec:d4:7d:5e:a8:8b:e0:ad:5a:8d:5b:36:c5:f8:1e
Fingerprint (sha256): 5e:9d:d9:93:4d:3b:f6:54:bd:91:45:8a:75:54:2e:a2:b5:d6:05:c7:96:6b:54:0a:97:cb:bb:15:75:64:44:ef

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate netnation.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netnation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netnation.com
www.netnation.com

Other certificates including the domain name netnation.com

(limited to 100 certificates)
sitecontrol.netnation.com
spritessl.netnation.com
sitecontrol.netnation.com
api.netnation.com
freeway.netnation.com
0x.ca
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
webmail.netnation.com
padlock.netnation.com
secure1.sc.netnation.com
cart.netnation.com
*.netnation.com
api.netnation.com
0x.ca
api.netnation.com
sitecontrol.netnation.com
sitemail.netnation.com
cart.netnation.com
api.netnation.com
acctmgr.netnation.com
order.netnation.com
order.netnation.com
api.netnation.com
api.netnation.com
0x.ca
bladesssl.netnation.com
domains.netnation.com
acctmgr.netnation.com
webmail.netnation.com
safe.netnation.com
acctmgr.netnation.com
cart.netnation.com
sitecontrol.netnation.com
api.netnation.com
acctmgr.netnation.com
domains.netnation.com
freeway.netnation.com
webmail.netnation.com
stronghold.netnation.com
netnation.com
sitecontrol.netnation.com
cart.netnation.com
manage.netnation.com
cart.netnation.com
springerssl.netnation.com
0x.ca
lock.netnation.com
marblessl.netnation.com
cart.netnation.com
cart.netnation.com
domains.netnation.com
webmail.netnation.com
0x.ca
webmail.netnation.com
manage.netnation.com
ssl.netnation.com
netnation.com
0x.ca
acctmgr.netnation.com
acctmgr.netnation.com
sitemail.netnation.com
0x.ca
order.netnation.com
webmail.netnation.com
freeway.netnation.com
freeway.netnation.com
apt.netnation.com
*.netnation.com
sitecontrol.netnation.com
sitecontrol.netnation.com
order.netnation.com
api.netnation.com
0x.ca
api.netnation.com
0x.ca
sitecontrol.netnation.com
am.netnation.com
cart.netnation.com
urchin400.netnation.com
order.netnation.com
webmail.netnation.com
0x.ca
sitemail.netnation.com
staging.netnation.com
acctmgr.netnation.com
0x.ca
sitecontrol.netnation.com

Certificate

The complete raw certificate details for netnation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSGP24JAECcxloLvkaw
SB+4j/+zdtxMqX3U7QV+QcaON45evxHdi4utMVHJgB9knA7LtROz8HdzlKByqVjd
D48mQJdmt1UFjCeLHQeg4v/Ffp/iQf3nkNJ51VwZWgTkAnrddch/BaJ4Wd7szGJ4
LzONH4B01CeLeA1VY/rTmTGcwxi5wTyUT29TjYIZs9e0rzHYLbsF4z/dGK0WSrv7
cEXpsHQLMFJke7QTOamH3HHbz7K1eRfThRlOz1RC9u3LcPui7uFPbVvsYGLBDtxb
N0hkp4Vyok7JOO0LB8hAVIMpNLvdzC5FAvX2uxfCJQGrTjQcEfXgAe2Tl5EdGZZc
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20144928230265449981579779580116674999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netnation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21849347720625701238678386256689921441967773070699151306040590125007260816026289476475976141461846868620468404542798247309224514430060178435025673127643616861953438549142646653909960303744420826474340618558691848598759773273447584152414086068566361591484267193165494912437722778101101426910004110340200213067452913799055888365609190752090773466714936870755055949442304649589388098496955545385851150224251650713801665976058249474792388758184542023276688156618093147148130728240664167753540405056584553157158548017001842031025223795970939312771442800103765050790087249542896395013009615202385660946875904532717453597837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e93fb3cde0b260ff895a2ec8e7b1e10e2e4d90c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netnation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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