www.pizzahut.hu

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 1e:4e:dc:c3:7e:4e:45:e7:60:a1:0d:2b:56:97:60:d4 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.pizzahut.hu

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:4e:dc:c3:7e:4e:45:e7:60:a1:0d:2b:56:97:60:d4
Serial Number (int): 40286316647207423954046169404497420500
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 7a:be:4d:78:48:f7:b6:9e:a2:e0:2d:52:d3:e0:cd:bd:95:2c:1c:e5
Fingerprint (sha256): 70:35:56:a4:f8:94:38:12:95:c7:e6:c2:19:54:d3:2b:ee:0d:82:7f:ca:5e:0b:39:3c:ae:f3:d9:52:2c:ad:b8

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate www.pizzahut.hu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pizzahut.hu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pizzahut.hu
pizzahut.hu

Other certificates including the domain name pizzahut.hu

(limited to 100 certificates)
pepsi.pizzahut.hu
pizzahut.hu
www.pizzahut.hu
www.pizzahut.hu
unnepinyitvatartas.pizzahut.hu
unnepinyitvatartas.pizzahut.hu
www.pizzahut.hu
www.pizzahut.hu
pizzahut.hu
pizzahut.hu
pepsi.pizzahut.hu
pizzahut.hu
www.pizzahut.hu
unnepinyitvatartas.pizzahut.hu

Certificate

The complete raw certificate details for www.pizzahut.hu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RKkbCkaTSouZKzY6YYJ
JG1C/3Xs2EObjpcnVK7cncHitXZTw9UwOZPuISIoGl2TaK5GwG3xOJjLQpC6nkym
865CNf9p/ceIbhwWpyEcyMb7UkHrGgb0caDAfBX3APIyXKWRu+Z3mkWcIF9v4mvj
HK3Kjd/hf7VyK0pOnNnN2GrGYJ4OIhMNUR+KXa6ZTOygZS5sgbRgp8OrX+GAM9KS
e4fg6MJvRrtCXHQP6pCHUGnDJmTVpWCK5ndHh3bUiFg0CJnXCP/QIWAMtaIfKbAO
8Hi3nYGuRpW4t5IbaWoQ5k2uXWj64ONjlzT7LDDItRZN2I5zssfCxHL3yS8RQqkD
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40286316647207423954046169404497420500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.pizzahut.hu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28412811465984662663783472510121622672900841620768084343440894654378111473491336194843080364762464143381010065344432413533220347214032356673582946861006218704717384773764236376897260330241408711683904225160073774631158224010395626667217831448457887128237616201497433195778758757681839514824415546071685458437271375625376758147744461196292181242966575561006076118244074325670051044657117806844199418206495688481485419745727841169677034391190717233638201290398424098910055984724365202362549611708217637007513936572063196145721018593742218518976545490744817454464006906954673553421516817681953304118165975635531032757197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pizzahut.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzahut.hu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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