*.i-csr.net

- Applied Systems, Inc -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 7e:5e:0a:18:15:40:45:1e:8d:b9:93:4c:a9:60:d4:f4 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Applied Systems, Inc

Organization: Applied Systems, Inc
Organization unit: Internet
State / Province: Illinois
Locality: University Park
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:5e:0a:18:15:40:45:1e:8d:b9:93:4c:a9:60:d4:f4
Serial Number (int): 167971008105750493507615476482553468148
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): f0:f9:de:88:78:4a:71:a7:81:88:ed:59:07:be:b4:7d:a0:84:8f:32
Fingerprint (sha256): 74:03:16:85:b3:e5:b2:f7:31:16:1a:d6:06:94:02:4e:7c:76:47:05:8d:3b:5f:6c:e7:9a:50:e2:1e:08:43:31

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.i-csr.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.i-csr.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.i-csr.net
i-csr.net

Other certificates including the domain name i-csr.net

(limited to 100 certificates)
*.i-csr.net
wwi.i-csr.net
wd03.i-csr.net
wwe.i-csr.net
sni.cloudflaressl.com
wd15.i-csr.net
wd05.i-csr.net
wd01.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
ww8.i-csr.net
wwh.i-csr.net
wd03.i-csr.net
www.i-csr.net
wwc.i-csr.net
wd02.i-csr.net
ww6.i-csr.net
wwi.i-csr.net
ww8.i-csr.net
i-csr.net
wwo.i-csr.net
wd01.i-csr.net
*.i-csr.net
ww3.i-csr.net
wwc.i-csr.net
wwh.i-csr.net
*.i-csr.net
ww7.i-csr.net
i-csr.net
wwc.i-csr.net
wwl.i-csr.net
wwa.i-csr.net
wwk.i-csr.net
xdc.i-csr.net
wd11.i-csr.net
wwd.i-csr.net
ww6.i-csr.net
wd04.i-csr.net
wwc.i-csr.net
ww3.i-csr.net
ajg.i-csr.net
wwn.i-csr.net
*.i-csr.net
usi.i-csr.net
wd01.i-csr.net
ww7.i-csr.net
wwd.i-csr.net
wd05.i-csr.net
ww4.i-csr.net
usi.i-csr.net
www.i-csr.net
ww6.i-csr.net
wd12.i-csr.net
wwg.i-csr.net
wwo.i-csr.net
wwa.i-csr.net
wd12.i-csr.net
wwn.i-csr.net
ww7.i-csr.net
wd05.i-csr.net
*.i-csr.net
wwe.i-csr.net
ww9.i-csr.net
ww9.i-csr.net
*.i-csr.net
wd04.i-csr.net
wwh.i-csr.net
wwe.i-csr.net
ww6.i-csr.net
wwa.i-csr.net
wwg.i-csr.net
*.i-csr.net
wwd.i-csr.net
wwk.i-csr.net
wwb.i-csr.net
allied.i-csr.net
*.i-csr.net
wwa.i-csr.net
wd02.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
wd16.i-csr.net
*.i-csr.net
wd04.i-csr.net
wd10.i-csr.net
ww8.i-csr.net
wwc.i-csr.net
wd04.i-csr.net
wwg.i-csr.net
demo.i-csr.net
wwk.i-csr.net
i-csr.net
wd01.i-csr.net
ww9.i-csr.net
wd05.i-csr.net
i-csr.net
ww3.i-csr.net
wd03.i-csr.net
ajg.i-csr.net
wd05.i-csr.net

Certificate

The complete raw certificate details for *.i-csr.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4WwprKszKb8MrnJKTh/
ygA4pJohbS9VejJhofixA/KvHwM6f4o4MGnq8ZKNyHnovF0JJOckdwyRhnKASNof
1yXvrPfe7ndGZHEaR1amaWpPy6xURcqUgd9afAvbvT1BlHzmMcwC0zUx/O2ZyPa2
zKjEORnz/Mw1uhHUtu/EOsbNFFHw4C4guAh3xHWnY4kqFJ3PlrfeuA51lMjHj76t
je2u6Glfo4QYKYpHsoEbKMtPSTMLW7Tz5EA6cJqVGrav8aIDNMrFIuBiqQ4ouJyQ
6/YO0ac4iks8kVbzCdTb0HWNmEU9vVTYN+Kf8z/RD/RxTGrP3nNZHrYOM2vlgtsQ
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167971008105750493507615476482553468148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Applied Systems, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Internet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.i-csr.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23167534826351301874019634046472778126838628289453046716936122589990418053089808015480906214805102514654037307102655888322229697868182007263828280163277259956304782703891863423072191877990189289715879503730903089777785563475924949683371055065741291048992628880358198120571080235044871839416089377112957685379823982816901235180538487275866683557062220645665743579582568972327741378568484168128626259212116238679452661763679953634091330121144885743138936552917039273881740733264287261627786653959337413549605631505658787073658004099313395055384580462242467836473668752227627236537637894609478282803104017375880357286081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-csr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-csr.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:8|false] OBJECT IDENTIFIER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65663544940541939564994874606806402433130961881123052396472568313124026778221
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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