*.fsl.dk

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 20:ba:a7:2e:72:7f:4c:90:2a:e6:3d:00:a7:f8:1c:1e was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.fsl.dk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:ba:a7:2e:72:7f:4c:90:2a:e6:3d:00:a7:f8:1c:1e
Serial Number (int): 43504453923139257614948292454480616478
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 04:28:87:12:a0:9f:33:d3:30:35:96:7f:66:0e:f6:26:a8:e5:62:5c
Fingerprint (sha256): 60:86:37:99:81:43:54:c5:a7:55:a4:00:b7:6e:33:ad:70:37:b5:b3:02:ce:20:dc:49:42:a1:42:f6:97:0b:ae

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.fsl.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fsl.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fsl.dk
fsl.dk

Other certificates including the domain name fsl.dk

(limited to 100 certificates)
skole.fsl.dk
connect.fiduro.nl
connect.sbadirectaccess.com
*.fsl.dk
mobile.fsl.dk
network.huntrex.com
*.fsl.dk
connect.saansinternational.com
connect.sbadirectaccess.com
*.fsl.dk
fsl.dk
mit.fsl.dk
fsl.dk
connect.sbadirectaccess.com
connect.forthecollective.com
connect.ampliusworkplace.com
connect.sbadirectaccess.com
fsl.dk
*.fsl.dk
connect.sbadirectaccess.com
*.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.madsciencemaine.com
toolmasters.izzyswan.com
connect.clahvay.com
connect.sbadirectaccess.com
*.fsl.dk
connect.sbadirectaccess.com
connect.getmeofficial.com
toolmasters.izzyswan.com
connect.sbadirectaccess.com
cssi.leanjourney.com
skole.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.astroline.es
www.fsl.dk
fsl.dk
fsl.dk
connect.sidburton.com
connect.seedformations.co.uk
connect.sbadirectaccess.com
*.fsl.dk
connect.ecmins.com
*.fsl.dk
fsl.dk
*.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.cds-me.com
connect.alchemex.com.au
connect.c4ecomputer.com
connect.forthecollective.com
connect.drsofa.com

Certificate

The complete raw certificate details for *.fsl.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5nkDY1Hj6SVEHfJIYDa
QtAXVrYiU7LJqHjsRD/AxItyigxow/GJHmfsZw4EDM89jNpNet7zRhddJ/RrTLBI
pqwmMyZ4k8agk2A3Wl4Pv9Q5mm8YJdr9BciZ/LWr/RiPiWLbPu8UzNLZm1Vc2g2v
tYvS8DbwyZJTHzy4xIJafREe6az0wCyuMjvhiQ5Jd6gigjtl0klBnIVy1x3qpW9x
4rdFjH8QWQaCr1uLCdkOcwZn54jWV61Tg2WNLImIBm/Vu2KqzuoEWutdEZwaSw/T
gzNdp6tGH0ZMcPxk71dvsKZ2bzQlRyNDtI58us9SrEZaKKnATw1iBikbVLee+Psu
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43504453923139257614948292454480616478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fsl.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24187402645995233050389532584965093752716189441793867416169757779960085513388546242926076031176468656824835311703158686177074711158734307822022863578985419506566569637500677004894390731970005896760733848133706457644200880715724992232531402667280302367872645098294995334004039212337145888972155922259154350193018950104496052265216899087265844265047983293626512595450872334968032589223367496739449090487796649784573707297832315859419473608858393202174700562022378336371261685902360578421074820217546837461098777404510709754434920970155477991707459528114254026368029525009740897672393992954555182734760428223167834304161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsl.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157c24b36a50000040300463044022068f1d66df2a91298e49592013a46d68f362b6e4c8a5d313189ea4240de42c2650220247737aefdb8faf495f1f59640f68bf82ec8422901f632881f3f975ce5c2b6f400750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157c24b36c60000040300463044022023ae54cc225bee1b5364121bdb496fc441e6a038d2ed164443f661299e582038022004dc0d1ef9da9e4338e895f5e8f894045817bf76d7b4d14981e0acf4f6224f9f007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000157c24b38a1000004030047304502210096f638dbee321c1c047a57ed1a9547980348baa012feedbc1dfda7ab76cdf70402206e4ac18346f06d10b5b0301179a9a850efbb085dcb67eaec5356e653b9a890b8007700bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a500000157c24b37990000040300483046022100e811431764a3daa04feb3f508febc618ca65937b6bc60dd84147db8b98d4671d022100b90572bdead5ce7dd2fab1b5c573f4ab5751a57df8134b1f22aa71395cda1916
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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