*.aur.is

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 71:a7:e5:25:14:76:48:f2:99:92:d5:6e:0b:f0:ce:f6 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.aur.is

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:a7:e5:25:14:76:48:f2:99:92:d5:6e:0b:f0:ce:f6
Serial Number (int): 151074524708644757041108767552633360118
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 0f:f1:fd:46:93:6c:e1:2c:5a:a9:7f:a5:e7:f5:0a:dd:8c:57:f1:ff
Fingerprint (sha256): 77:29:cc:8a:f6:d3:c4:f2:6b:14:5e:53:52:ca:71:54:a3:f8:cf:e5:37:7c:b8:30:f3:b3:0f:35:70:64:6f:39

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.aur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aur.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aur.is
aur.is

Other certificates including the domain name aur.is

(limited to 100 certificates)
aur.is
pymera.pe
greidsla.aur.is
kvika-proxy.api.aur.is
www.aur.is
signpost.dev
greidsla.aur.is
beta.aur.is
gustavogranado.com.br
*.aur.is
www.aur.is
aur.is
api.app.staging.aur.is
api.internal.aur.is
www.blinkov.com
aur.is
www.aur.is
www.awaq.fr
aur.is
aur.is
aur.is
www.privuo.com
deniputra.com
aur.is
www.privuo.com
aur.is
kvika-proxy.api.aur.is
www.aur.is
www.beti.ch
beta.aur.is
api.app.staging.aur.is
api.klink.aur.is
greidsla.aur.is
aur.is
account-dev.tanto.app
www.ficaemcasamairi.com
api.app.staging.aur.is
www.lossti.me
visa-cms-dev.hicity.world
servicedesk-api.internal.staging.aur.is
www.binarycube.in
greidsla.aur.is
aur.is
aur.is
sanjog.turkunepal.fi
aur.is
www.aur.is
gustavogranado.com.br
greidsla.aur.is
aur.is
greidsla.aur.is
greidsla.aur.is
api-temp.app.aur.is
aur.is
sfg-manching.de
bayport.bytekast.io
api.internal.staging.aur.is
www.aur.is
simplebingo.net
www.miomio.de
greidsla.aur.is
api.app.staging.aur.is
www.aur.is
www.futureicx.io
api.internal.staging.aur.is
aur.is
aur.is
test.fitto.work
*.aur.is
auth.withfinn.com
www.surajitg.dev
aur.is
www.gosh.live
demo3.velocitytalent.com
www.dailyui.com
aur.is
*.aur.is
posi.aur.is
api.klink.staging.aur.is
aur.is
api.internal.staging.aur.is
posi.aur.is
greidsla.aur.is
greidsla.aur.is
greidsla.aur.is
demo3.velocitytalent.com
www.aur.is
aur.is
aur.is
api.internal.staging.aur.is
api.internal.staging.aur.is
api.servicedesk.aur.is
thjonusta.aur.is
api.klink.staging.aur.is
aur.is
www.aur.is
aur.is
*.aur.is
api.internal.staging.aur.is
fastify.pandicorn.app

Certificate

The complete raw certificate details for *.aur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaNhR/8QTowa0LwqwEaA
e0MqqChlJ6eUGno32MLJYggHcYUj7Fq+0FyEmJoT7UBnY7sgnmM/mDr8Z7CvPZ3N
gso2Y99r7cM3qHzVpJXdU+4v3X80MmcClpwhFsUKO9ZmdsAyqN3vOfDNXvU8NybK
IExsUIhqwknFspc5+6GOGcX/XBu6rYly47f89gGqW1cLlL26135YUQEQOm4wqsR2
U846xNIcFHlA79K9goIA3sbtc6otsxGa3QHQwn3qFikeoJXbwL6lZ3EsbiXKdMpw
ltfS0b2EZmL3NbcQnj2S3xDCZjX58UOAmCEMFMh6A0Xfsi41L8bxpEvyaDj9wWUS
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151074524708644757041108767552633360118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24949511761417874893270161971718400101942654383840535347569414298942825303432540502615095727488978798671680652092359621003045449344968563045188200440995114360500654708894324782250378513143578547698176461786259726569390771465500352393383893271329119898068853318377836163241369033677167643711138180379904408864202062171327285655076507992187676265699183878895938874374599657973673378900600103115577248947340326572682489227757524172790759768585221891939634689766457845840813827736999590544072589222805334187484252613458087262324779266250146995919581111914577669154302800892659143946120340145332224735473579558709198394019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015756c51d7300000403004730450220647191dd63296f030d45da3db6c2affb65d9d2d8ad4da5bcf827d990cf6882dd022100ca4e68ea0c890c215da4aefc4d0da0e42315a811de865c125e760205d885887200750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015756c51db10000040300463044022062fe066e451ab6ca3c69cd01ed4a0a013c4f7df26ac33af104af53d83c545312022021d9edb5b61b975ff7c03f29e7191e4abab002498765e749b683824e4afda94f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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