www.atlanticbt.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0a:2c:cc was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=tf5hNdKDPOK9R8hhsyKddKS9du1ttyeH,CN=www.atlanticbt.com,OU=GT86027808+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:2c:cc
Serial Number (int): 666828
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 9e:0a:47:df:f5:91:73:76:f8:1b:c4:25:31:7d:91:22:e3:d0:c3:1a
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): b4:0a:e3:9e:67:3c:7e:4e:5a:19:bb:11:30:66:bf:26:96:66:8e:4e
Fingerprint (sha256): 64:d9:62:86:94:6e:62:1e:92:11:46:5b:f8:e7:4c:77:e5:fd:c1:b3:ae:74:00:1f:d8:4b:e4:74:af:80:f0:48

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.atlanticbt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.atlanticbt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.atlanticbt.com
atlanticbt.com

Other certificates including the domain name atlanticbt.com

(limited to 100 certificates)
phonecool.com
atlanticbt.com
sapphire.atlanticbt.com
*.atlanticbt.com
*.atlanticbt.com
nerdy.life
movietracker.app
corp.portal.qdoba.com
go.atlanticbt.com
www.slimeasy.org
atlanticbt.com
movietracker.app
go.atlanticbt.com
gcp-us-east1-10.dev.app.carto.com
bcbstestadmin03.atlanticbt.com
atlanticbt.com
*.atlanticbt.com
sni.cloudflaressl.com
corp.portal.qdoba.com
workwith.atlanticbt.com
praetoriansecurity.adeptly.ai
deliverymetropolis.com
corp.portal.qdoba.com
*.atlanticbt.com
staging.questionhub.askitstudent.co.uk
contact.atlanticbt.com
go.atlanticbt.com
atlanticbt.com
spanapp.io
www.productx1.com
mail4.atlanticbt.com
*.atlanticbt.com
www.atlanticbt.com
coara.co
workwith.atlanticbt.com
qa.sirchie.atlanticbt.com
staging.atlanticbt.com
corp.portal.qdoba.com
atlanticbt.com
*.atlanticbt.com
fsus-20a.freshservice.com
sni.cloudflaressl.com
atlanticbt.com
nerdy.life
support.atlanticbt.com
www.atlanticbt.com
cacti.atlanticbt.com
go.atlanticbt.com
bcbstestbcbs.atlanticbt.com
www.adityabhatia.in
bcbstestbcbs.atlanticbt.com
analytics.atlanticbt.com
atlanticbt.com
coara.co
sni.cloudflaressl.com
admin.vitolicfoods.com
app.iturramasat.com
events.atlanticbt.com
www.tomarsuraj.in
go.atlanticbt.com
cqs.atlanticbt.com
go.atlanticbt.com
corp.portal.qdoba.com
staging.atlanticbt.com
fsus-20a.freshservice.com
fsus-20a.freshservice.com
go.atlanticbt.com
ssl2136.cloudflare.com
atlanticbt.com
fsus-20a.freshservice.com
app.myteacherapp.com.br
atlanticbt.com
redmine02.atlanticbt.com
sapphire.atlanticbt.com
contact.atlanticbt.com
mail2.atlanticbt.com
touchpos.veggiefactory.in
go.atlanticbt.com
bcbsqa.atlanticbt.com
bcbstestbcbs.atlanticbt.com
contact.atlanticbt.com
bitgetm.xn--bb0bw4mtof.kr
qa.elos.ai
git.atlanticbt.com
go.atlanticbt.com
bitgetm.xn--bb0bw4mtof.kr
atlanticbt.com
zaraz.digital
atlanticbt.com
corp.portal.qdoba.com
bcbsqa-admin.atlanticbt.com
cloud.vajra.ai
ssl2136.cloudflare.com
bcbstestadmin03.atlanticbt.com
fsus-20a.freshservice.com
go.atlanticbt.com
www.kolva.nl
www.verboedu.com
go.atlanticbt.com
ssl2136.cloudflare.com

Certificate

The complete raw certificate details for www.atlanticbt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm/qC/QZ3Af7lJ1tKRVz
HBu0vk1JeILcv++GF3kobGRNs8EOO3lLf4chwo5Zw6rdajfu/j90fUE1vg+R3dY9
VuBLJHtPAvz2WOXtlBBsnAq5Y0qZ4N3lMHsQnfrj188UUqB3guhZU3g2irKPltL0
zhfaRdRQPCZtzGHlckWQPtnRLbvQcxU1l5WOxcmmAKO4b7L7QcmpPwXmbffBPbER
vtLI/VvJcQBFosdnOFYPkt9vTwVRXRPIdYyp3EP1xVZ8F7lDM1wfmPMRQwSguvgl
c6Vx5aONmxhqIMbG8GiqgPo03FQCR5t0Vg7JwqIKpeZKHBoUiAWEwRK87cyWBXVu
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 666828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-19 19:20:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-22 07:12:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tf5hNdKDPOK9R8hhsyKddKS9du1ttyeH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT86027808'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.atlanticbt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26060277794012986125781008784682341371718013368218245534318785058851833991027178290688779772173510978540258866053460052006400677833886353224489606242452015569086518225929899470502529015026059376604585864317046175838323040236590362910470271788782838017901498449913398336560065553031465620621670256793431138718526186192696536748502645197340776452037014276150602763052807855280898984741460514254154986588873885750448821345291656920460503449901119481086434463235502858351176656575590343210521399621663794876686735417395556485133474915282384881086432466699643081438257441604092436447826694058792963414143710815148760723021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticbt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e0a47dff5917376f81bc425317d9122e3d0c31a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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