*.namirial.com

- Namirial S.p.A. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 2d:14:ed:6d:64:10:ee:b6:15:ad:90:4b:39:d5:43:fd was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Namirial S.p.A.

Organization: Namirial S.p.A.
Organization unit: Security Department
State / Province: Ancona
Locality: Senigallia
Country: IT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:14:ed:6d:64:10:ee:b6:15:ad:90:4b:39:d5:43:fd
Serial Number (int): 59923921345406661411285949462552593405
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 3b:5e:04:c1:63:60:c0:89:90:f1:c3:05:bb:7b:0a:ab:e3:4a:ae:07
Fingerprint (sha256): 64:08:86:3b:a8:18:cc:4f:b4:34:ec:be:23:2f:47:35:7b:13:33:f3:73:ce:fa:02:6f:be:ea:31:00:f4:b6:29

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.namirial.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.namirial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.namirial.com
namirial.com

Other certificates including the domain name namirial.com

(limited to 100 certificates)
namirial-recovery-panel.cl.namirial.com
nordiskastatus.mambu.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
payserver.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
status-page.gurado.io
test.process.fwnamfis.namirial.com
*.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
*.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
onboarding.test.namirial.com
sm1.namirial.com
mbag-status.namirial.com
arkiv.status.geoikt.no
allianz-status.namirial.com
fchttp.namirial.com
gdprdoxapi.namirial.com
arkiv.status.geoikt.no
nordiskastatus.mambu.com
liveid.test.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
payserver2.namirial.com
*.namirial.com
liveid.test.namirial.com
arkiv.status.geoikt.no
srvtel2.namirial.com
*.namirial.com
mbag-status.namirial.com
arkiv.status.geoikt.no
srvtel2.namirial.com
arkiv.status.geoikt.no
mbag-status.namirial.com
arkiv.status.geoikt.no
paghe.namirial.com
cu.status.jasper.com
*.namirial.com
nordiskastatus.mambu.com
sm3.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
status-page.gurado.io
*.namirial.com
*.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
*.namirial.com
careers.namirial.com
*.namirial.com
srvfsc3.namirial.com
srvise1.namirial.com
status-page.gurado.io
status-page.gurado.io
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
onboarding.test.namirial.com
mbag-status.namirial.com
status-page.gurado.io
*.namirial.com
status-page.gurado.io
nordiskastatus.mambu.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
srvdibase.namirial.com
*.namirial.com
cafconfsal.namirial.com
test.sms.namfis.namirial.com
arkiv.status.geoikt.no
srvtel1.namirial.com
sm1.namirial.com
arkiv.status.geoikt.no
sm3.namirial.com
*.namirial.com
arkiv.status.geoikt.no
srvfsc1.namirial.com
allianz-status.namirial.com
arkiv.status.geoikt.no
allianz-status.namirial.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
mbag-status.namirial.com
*.namirial.com
srvtel.namirial.com
arkiv.status.geoikt.no

Certificate

The complete raw certificate details for *.namirial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr0nj8VkJKjGxik9rK1a
HVwtsgPwmbEL6ej9CQgmj1F33U72BRThoF95XQK0ym/LvL0QiKBiAlfmN4uCFf5n
XmtGIoPxo8g1A4PEOskG7taLrCaJFkCj/vnqjGCWYJRpJpdL/TTVshxkFErTsrzJ
P0PsMzzgpbtkRv+U8jBe90AEQGFxQyu/3H6iKN6B3uccsvhLbEAfuKEkmoVwxODs
rphRhFSVKWHDtUCKyLiwnqeYb7bEbBCG2l7QmrE+SCPHnep77rAnOI+xIv4WBAF8
UURqUtNdgcfuR4ngUjQex4AleLfRN/Lyh5v2mcZGA/DFBvmg7zrxNCXszroe5Vdu
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59923921345406661411285949462552593405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ancona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Senigallia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Namirial S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Security Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.namirial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21553787423110628934793760134885238902901490415914922684370858548083875603143027324907951851361861026586722328315462138753628945826690400308344580549419814082152607420289296307911061628365958934066264939579648101777646953105235295769145855320610124571746331846319389291766293556180699967201999432621580063711182480452294578436872983391591901769920619477959449596000027893605011929888732542644316925203451536761518664604452172200499898893537011804045106444303849731437699493696885608393737525044824660994388575428733013753184292311142543465988068041164748114478676954144216199659441537167734446041806662276895225638537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namirial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namirial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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