*.theranest.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 11:63:48 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=n2MRwEGwGcJjtKV9OoeYS3uEnooYyU9e,CN=*.theranest.com,OU=GT74287822+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:63:48
Serial Number (int): 1139528
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 60:b5:e3:dd:33:71:ad:54:eb:9f:c6:6c:8e:e7:79:e8:a5:44:dd:4e
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 4b:bf:98:62:d1:64:f4:89:ea:78:e3:46:07:5c:94:a2:6a:95:7d:05
Fingerprint (sha256): 69:5e:1d:1a:23:c7:5a:9f:d5:aa:2f:97:b3:4d:aa:19:6e:fe:fc:6d:0c:42:d3:ec:56:a2:7b:cb:28:e4:38:bc

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.theranest.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.theranest.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.theranest.com
theranest.com

Other certificates including the domain name theranest.com

(limited to 100 certificates)
*.theranest.com
cdn.theranest.com
tls.automattic.com
www.theranest.com
tls.automattic.com
parklogger.com
kondesacozumel.com
changelog.theranest.com
dashboard.theranest.com
*.theranest.com
changelog.theranest.com
content.panalytics.theranest.com
changelog.theranest.com
raffees.com
tls.automattic.com
adasurge.com
tls.automattic.com
sales.theranest.com
davonet.com
dashboard.theranest.com
changelog.theranest.com
changelog.theranest.com
*.theranest.com
remote.theranest.com
sales.theranest.com
changelog.theranest.com
try.theranest.com
changelog.theranest.com
changelog.theranest.com
changelog.theranest.com
www.yassinaunali.com
tls.automattic.com
tls.automattic.com
*.theranest.com
blog.theranest.com
theranest.com
www.hfccoin.org
cdn.theranest.com
*.theranest.com
erumasaani.com
changelog.theranest.com
www.rvafamilydentalcenter.org
*.theranest.com
www.podaroo.com
blog.theranest.com
tls.automattic.com
*.partnerapi.theranest.com
sales.theranest.com
*.theranest.com
www.beerstory.io
blog.theranest.com
tls.automattic.com
status.theranest.com
sales.theranest.com
data.panalytics.theranest.com
www.washbear.app
www.tayloremolo.com
status.theranest.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
votacoes.anamages.org.br
changelog.theranest.com
changelog.theranest.com
changelog.theranest.com
tls.automattic.com
status.theranest.com
sales.theranest.com
beta.paramanu.co.in
content.panalytics.theranest.com
changelog.theranest.com
yufni.com
sales.theranest.com
www.boxkite.io
tipsta.co
www.theranest.com
worker.centelho.com.br
changelog.theranest.com
status.theranest.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.theranest.com
placebuilder.ca
www.nowaker.net
tls.automattic.com
tls.automattic.com
tls.automattic.com
try.theranest.com
blog.theranest.com
sales.theranest.com
tls.automattic.com
www.fairyrescueleague.com
tls.automattic.com
tls.automattic.com
www.nanukthedog.com
*.theranest.com
*.theranest.com
tls.automattic.com
cegenius.newgen.co

Certificate

The complete raw certificate details for *.theranest.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDV3FJFakpP/LFEuTK29
pUksvaFdml00OaRPaMKPRQDxQP78Sgqa8sN5n94vwWrW9RuKfIV/duYE662pD8fz
n/9vLKlTmQ8z4+6Mf90BRMVfqdBZOZopiHg5ViO7VxjkXBZQKaZ+RisX4pXak1Me
/RoYroD+6ILJliXL+2TdHu9yzAjiokibro5tKP4j+BLZqd69t3w+P2+WASC7Km8F
Je3J/08Vck69+S1PNmlxSs9CZ4R4BMloMebpOLmXQCCpGz7n1Jo/r3h8ZaSFXdsn
Qu+vGYpupP1lwj4NVbj25nnrPRPihhZNWtoBwqBMQI4klU6idETcQHjXPHLTmMvz
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1139528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-19 09:41:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-20 22:06:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'n2MRwEGwGcJjtKV9OoeYS3uEnooYyU9e'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT74287822'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.theranest.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23254212765586220439772381951537283453875289989449385270329293883697700673883609232621832287831490874411724250791075155951950105878440678156058716962900684544198629239730037245723823979968664686567405244449611354434964868094028217353189508016566488564359454668915543686262300355089660957108574232121391534351420522217005120367999847681820398873304451364744587086150126414565471315016766676552516418340349013830515170317675333388288397583541828584390027834067558363368124428065751796259011815653233050954355189269954519534365084977411115811335694365627841231377593855697712904250214478657259867997198762364678869611443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theranest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theranest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60b5e3dd3371ad54eb9fc66c8ee779e8a544dd4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a19a0fe855cfa1b9ef4ecbc3fbcba0aaf4fdfbb0096d5386c27fe480dc1b049950df82078e9bbd2c7e8f1d5002b7a3bfaf9ce992463511c21f76e8c2407ec5a6819302da421936aa0e5725a11d04c4e187b2b7a0fcd63ff29bbc68210f74164fea5198e095a0eb349721cbfe78adf20c7ecf5e1993bede75c7607abc7b2813b519874c1872a48f7785a424fcf95e19c18099ef19b296dfe34fe94d9cffe4b3a60e2e9cccce9717f3239ab01e87c1bb38caa1ecfc1d5ab3c115d16d038c85d656d56ef8e058eab98118e519a43c5dab1828b57726f42d4002a977e9534aa782f415a7e230bc24e995dfdb0a6e41b464a1256a97b25bda5652cb4dce5a255f81fb