remote.eibe.co.uk

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 5b:31:70:a6:ab:c3:61:42:7a:8b:08:bb:61:02:c6:95 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=remote.eibe.co.uk

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:31:70:a6:ab:c3:61:42:7a:8b:08:bb:61:02:c6:95
Serial Number (int): 121216454997404273853150927182773798549
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): da:e2:0c:9a:b2:15:81:3a:ad:da:3f:26:f6:9e:a9:51:9c:45:78:ce
Fingerprint (sha256): 71:e4:0c:e9:03:17:95:cc:b4:c3:7d:3f:df:07:a2:5c:ac:42:23:53:7f:77:b9:17:1b:18:3d:5c:6b:db:9f:19

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate remote.eibe.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote.eibe.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote.eibe.co.uk

Other certificates including the domain name eibe.co.uk

(limited to 100 certificates)
www.eibe.co.uk
eibe.co.uk
shop.eibe.co.uk
www.eibe.co.uk
remote.eibe.co.uk
www.eibe.co.uk
www.eibe.co.uk
www.eibe.co.uk
www.eibe.co.uk
eibe.co.uk
remote.eibe.co.uk
www.eibe.co.uk
shop.eibe.co.uk
eibe-bar.nl
shop.eibe.co.uk
remote.eibe.co.uk
eibe.co.uk
eibe.co.uk
www.eibe.co.uk
eibe.co.uk
remote.eibe.co.uk
eibe-bar.nl
eibe.co.uk
www.eibe.co.uk
www.eibe.co.uk
eibe.co.uk

Certificate

The complete raw certificate details for remote.eibe.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIQWzFwpqvDYUJ6iwi7YQLGlTANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS
UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDMwMjAwMDAwMFoXDTIwMDMwMTIzNTk1
OVowHDEaMBgGA1UEAwwRcmVtb3RlLmVpYmUuY28udWswggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDFAMabD0EuHrHFWllfcUBXuxFd7kMLbchDFxJxvlN1
xHrr36Vndqs/yqj+b9Nv5LLbz/5aFIPqRMWedD1o4W76267k1Lxw0b+XIgXbhwG/
bkjembHI1pg/fFoIEFsPKP/tpNufvYBpri8HnCGzLhfQb4U9tRwoKK7TLZbR2aY6
c1u9+mHpZtODWePeJ4jPJmsS8S7K1HgJ2Y2qHa7xmYx3QdR28xvHKSOIxKQulh8w
6f+5Crh5eU8OMfvB186Fuvjkk8AjnvKlx+fz55sUlLaYIJyDmtcaOqXN/l2EKQ1u
7tAif9IhIdsYN5stuPHf3hBdFoyjnpxQ8tgMmb0K/v6xAgMBAAGjggNvMIIDazAc
BgNVHREEFTATghFyZW1vdGUuZWliZS5jby51azAJBgNVHRMEAjAAMCsGA1UdHwQk
MCIwIKAeoByGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3JsMG8GA1UdIARoMGYw
ZAYGZ4EMAQIBMFowKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNv
bS9sZWdhbDAsBggrBgEFBQcCAjAgDB5odHRwczovL3d3dy5yYXBpZHNzbC5jb20v
bGVnYWwwHwYDVR0jBBgwFoAUl8InUJ7CyewMiDLIfK3ipgFP2m8wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcB
AQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9ncC5zeW1jZC5jb20wJgYIKwYBBQUH
MAKGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3J0MIIB9wYKKwYBBAHWeQIEAgSC
AecEggHjAeEAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVqP
4ChqAAAEAwBIMEYCIQDLLBx3+YKrD2s88Xi48qcI7Nbx9+6I+q1CCabEumqtTQIh
AM5vFf2wyQxYjyugDnM7M7O6aQj6PRycVMsgeRXZKXBWAHYApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFaj+AogAAABAMARzBFAiBK/3EhoRoykbRr
ixwyfgB+VS/1xYKupDWW2bP3JrUKeQIhAO3MRajGPLHMkvBljGYCGkJeQP/dVI6Y
kwivXOJNu3yWAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFa
j+AqbwAABAMARjBEAiAmmt94lEcQmNrhIiSBwKlcRk4cDL4oyCwmcYcaL9HYdgIg
NBhsbEt038/6OajhrZSAuhSFfKJ1AqLnAqqjbI95e2cAdwC8eOHfxfY8aEZJM02h
D6FfCXlpIAnAgbTz9pF/Ptm4pQAAAVqP4CldAAAEAwBIMEYCIQC78CVy8YiNcpl0
GEWdPBg4AO6p5CBo61c1cMA8NYol4gIhAJrm+TI8XwtJgWXx+Ns+vaFbA8jOzr/P
cdCSH9+G6uYHMA0GCSqGSIb3DQEBCwUAA4IBAQAqnimTDbMJfO/hcBfu8FbQh8vW
WiNDppMAnSXujtUtkxEatcMUjke5PG6VS4/3/pfy4BX/miO9wy9oR6XW2iwTjgpt
MZnT2flSBlg9vYArR9gGhofIMgWPkStVEu/mnir++ti59xd39vafo2yY67Gzhru1
PvLP8J49Nz4rLbr0MoLe15fxGwNXTP6m5Ui20fLrplVYMbzU1xnWVtR+78fG6xiX
nl7Vu8k+VXnJ0wlIymD8aQQMj08EZIZQKUMQ1ruHN18gU4zmv7Aw0s6hPF6a09LI
fTrlap/A6W/Ulj1KixbwTKvm4D75u8x3S0pu9RxjxPHpwqEkG9GjOkD0EcaZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQDGmw9BLh6xxVpZX3FA
V7sRXe5DC23IQxcScb5TdcR669+lZ3arP8qo/m/Tb+Sy28/+WhSD6kTFnnQ9aOFu
+tuu5NS8cNG/lyIF24cBv25I3pmxyNaYP3xaCBBbDyj/7aTbn72Aaa4vB5whsy4X
0G+FPbUcKCiu0y2W0dmmOnNbvfph6WbTg1nj3ieIzyZrEvEuytR4CdmNqh2u8ZmM
d0HUdvMbxykjiMSkLpYfMOn/uQq4eXlPDjH7wdfOhbr45JPAI57ypcfn8+ebFJS2
mCCcg5rXGjqlzf5dhCkNbu7QIn/SISHbGDebLbjx394QXRaMo56cUPLYDJm9Cv7+
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121216454997404273853150927182773798549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'remote.eibe.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24869328641288342370458382376443046636347126997714810316911837059618447575417266541704844717836916681288734784725290373849241539765926905400748927303987744395105436752376513800744573621190273749952907934468228660763156351894305935864276955663561274979784885436070617339967219411493251344761416915713865739502655307812977526303179721204384059066057271280082720628492764143669168296917379998184769906805904626332365279361769683936526979265430851381124792030878608414888741711372067320129717484439328083187857578638666174613156027766763374960911115257793388336806127161269402039617491540114932956524732404994440962178737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.eibe.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a9e29930db3097cefe17017eef056d087cbd65a2343a693009d25ee8ed52d93111ab5c3148e47b93c6e954b8ff7fe97f2e015ff9a23bdc32f6847a5d6da2c138e0a6d3199d3d9f95206583dbd802b47d8068687c832058f912b5512efe69e2afefad8b9f71777f6f69fa36c98ebb1b386bbb53ef2cff09e3d373e2b2dbaf43282ded797f11b03574cfea6e548b6d1f2eba6555831bcd4d719d656d47eefc7c6eb18979e5ed5bbc93e5579c9d30948ca60fc69040c8f4f04648650294310d6bb87375f20538ce6bfb030d2cea13c5e9ad3d2c87d3ae56a9fc0e96fd4963d4a8b16f04cabe6e03ef9bbcc774b4a6ef51c63c4f1e9c2a1241bd1a33a40f411c699