event.cok.dk

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 13:94:2b was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=uYM7/aDLqGJnpWh73CTK6IzxhOcAVioo,CN=event.cok.dk,OU=GT25871358+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:94:2b
Serial Number (int): 1283115
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 5d:ce:fa:0e:70:d7:fc:a3:80:0c:f5:4f:aa:2b:58:b8:4a:09:fb:ec
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): bb:6c:f9:02:2c:a0:93:71:32:1e:ed:26:4a:00:42:11:16:57:22:6c
Fingerprint (sha256): 73:0e:6a:bd:7f:cd:59:c9:b7:7c:1f:ab:e5:36:6b:bd:ea:32:e2:d5:b5:01:d8:2e:69:aa:8f:8a:b6:2d:2b:7b

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate event.cok.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for event.cok.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

event.cok.dk

Other certificates including the domain name cok.dk

(limited to 100 certificates)
sipdir02.lync.oncirque.net
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
arena.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
uddannelse.cok.dk
sipdir02.lync.oncirque.net
cas.frontdata.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
uddannelse.cok.dk
cok.dk
cas.frontdata.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
komponent.dk
cok.eu
*.cok.dk
uddannelse.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
arena.cok.dk
cok.eu
cok.eu
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cas.frontdata.dk
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
event.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
test-uddannelse.cok.dk
komponent.dk
sipdir02.lync.oncirque.net
auth.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
*.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
arena.cok.dk
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net
sipdir02.lync.oncirque.net

Certificate

The complete raw certificate details for event.cok.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RqUoCKYGVR1TMOMIFYy
DZsUQjpMHE6aaLNsCR/Vzmi1/gIvOedxzWcr24UG4IdK5+pVW3MLjThtBATg+A8I
9QcOpIV2XQOiOh/+5+8w6BK15/yWaELfmYI+wmc6HRL/WQOtPtUW4smygtIM9+e2
tVbkq+/t9c816yAHeJqaifHV23xNsJqGyRgbfGFC1Cib1HYy1qoszuCOjk8Gv87J
9i0ewwFYwrMkm7NRUHM6rsmVlBoBr44uQCqFyUyOGepaX5BJUM+zaE2b/oQIbvG/
RnvIsShs0XrlxcPBNyzz/OtOCmkqVzhmh0pLP3m64keO5fkO9fxpqijVZ86OV3jI
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1283115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-21 15:37:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-24 15:44:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uYM7/aDLqGJnpWh73CTK6IzxhOcAVioo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT25871358'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'event.cok.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28416725984193121696967920995714930764704706965007966274185155876094345283803049581591363423046491521188114492354638339546283836030330499564888570692653797594809489859261989928943023467720812721804685437317272405859980873717352551972238362251759187757595243323217789480929187276520550273466353895950502906940082654889248789126769873327780130935021603265175216464557916331555110040704494087042411690767876865058938970441117373319307073352330967762994772437107230443430527148320888547786037550940543347785472601912601772802163418338493527341179806507651495695825277853832101495983908538923984181880092213238020567517279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cok.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dcefa0e70d7fca3800cf54faa2b58b84a09fbec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ee0d5390c7daeaea00393458262de33544d7374600ec11ba5654fd90ed122f8d31ac1f02681d5b3c2993c50cbb2d707fb7695050bfa89093ecbc0b52444f1628a2e2715f36582e3c7edea2b8736fa8185ea4cf69b73b5edf15a17430fbe3110106c612a294271be4680d92fa85e437b11a2bccc85c629982d2f18b20e042d4a5906f556ca2008eeef43e21ca14366da32f33938170424b90ade6961a3eef251d50a1c60d94ac2151ab858c8fbe363b0b5e354a47a13ca5bf97cd051184bd90725285cc14119dbbeebfe7c4444d961f565072b96c7fffca5b78b93dc8467ef1798bac18883fa41fd29ba1d6334db897d1c692daecf8c44b1b2d37abc54768647