*.utick.be

- MediaMorphose -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3d:03:08:ac:15:05:3d:4f:a9:68:23:49:56:e0:a8:c7 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

MediaMorphose

Organization: MediaMorphose
State / Province: Bruxelles-Capitale
Locality: Bruxelles
Country: BE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:03:08:ac:15:05:3d:4f:a9:68:23:49:56:e0:a8:c7
Serial Number (int): 81098660526481773766048881882049849543
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 30:9c:6b:9d:74:25:8b:01:71:7c:e4:df:0e:bd:fe:c5:f7:dd:b0:a0
Fingerprint (sha256): 69:fc:12:08:26:39:39:77:d3:e8:25:c4:d0:bb:4a:bd:67:46:19:36:90:dc:b1:fd:f5:f9:d8:a7:e2:d2:5e:de

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.utick.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.utick.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.utick.be
utick.be

Other certificates including the domain name utick.be

(limited to 100 certificates)
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
aulamagna.utick.be
*.utick.be
visitezliege.utick.be
*.utick.be
*.utick.be
*.utick.be
manager.utick.be
aulamagna.utick.be
api.utick.be
*.utick.be
*.utick.be
*.utick.be
api2016.utick.be
*.utick.be
admin.utick.be
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
utick.be
*.utick.be
*.utick.be
library.utick.be
*.utick.be
*.utick.be
*.utick.be
booking.utick.be
visitezliege.utick.be
admin.utick.be
*.utick.be
go.utick.be
*.utick.be
*.utick.be
static.utick.be
static.utick.be
*.utick.be
*.utick.be
admin.utick.be
*.utick.be
shop.utick.be
*.utick.be
*.utick.be
shop.utick.be
view.utick.be
*.utick.be
*.utick.be
admin.utick.be
utick.be
*.utick.be
*.utick.be

Certificate

The complete raw certificate details for *.utick.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81098660526481773766048881882049849543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MediaMorphose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.utick.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884690971661823808783320092822576575285839735494991933922557306236477924862891033556254010990136940561884061186889597677044141994315301439230419401819121720043749273587757867708853195759755330096680047724238269141379590650453511160443272180715321052077698013913682194196839192678630327405143180586449111532561973221931560466942171534123714308174777914516217975381055601022668592826412095357757366861627974722915134775166742029764095688928804020760211469341212398847274391196732442825124885089572175969897664631396997937735497312805498739582055736428194200310140798095448833723071633405169754335572951445159030356360657398667697312577378852428006642798296529238691876237020094258157639721146145968703563223673127433862673868795036890721894583540049661969476558450324139838587321725628043408134735317948518399622844125527806486746800129804711072347061461224656516497888081844363205750291155087272789225382382518114642500500843420711016924743535788490671028591631865836149403645223263898010295855479375588091970398086955670994541894634376983261524878845155284224964366441094291790131650351995687548416926905667760329943016126808239735007883842108608788470555528145844370850034014418140084148445750109557072759543319292321862726981089219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utick.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utick.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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