*.bayesforecast.net
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 67:14:7c:c2:6e:e5:cd:6f:af:6a:72:c2:0e:03:c9:e4 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.bayesforecast.net
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 67:14:7c:c2:6e:e5:cd:6f:af:6a:72:c2:0e:03:c9:e4Serial Number (int): 137016859926392577274474129323861461476
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 1e:86:51:54:16:33:c8:6e:be:34:df:ce:b5:70:58:ab:7e:4f:82:85
Fingerprint (sha256): 78:65:a3:a9:4e:0a:3a:54:bb:83:bb:60:94:9a:ad:8e:79:39:4e:be:d3:a8:b5:46:0d:75:d5:af:a9:ba:a7:e4
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate *.bayesforecast.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bayesforecast.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bayesforecast.net
bayesforecast.net
bayesforecast.net
Other certificates including the domain name bayesforecast.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.bayesforecast.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIQZxR8wm7lzW+vanLCDgPJ5DANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDMxNTAwMDAwMFoXDTIwMDQyNDIzNTk1 OVowHjEcMBoGA1UEAwwTKi5iYXllc2ZvcmVjYXN0Lm5ldDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOLecesWbylnN+Fwfkt5kmeU6rb4lEkbKgTlX4sy PmNUmozj4Qpxc6kpRhc8zryOYq3ndujJ1qH1MwrnoMKaCunWJq/YtreIWGDIor1l psvnaDDgKSwmx5BvCjOFo/1tJGitl/kuZ13mfS5IsgqinZII7OOEM94kCZJyExRN mxjz4pTlvvk69K5XBFlMHVkfYtIcN5UYNTXBRulpeGj7Nh+ZROiz4gb09eUQ41jk IvwxBqcyhwhoAeTmH5aWeheA0HW2RDuFbDFbmKVFqx+w5uCSgGpXqkflYwdoGgTH 3JCn1kuMWFXn5O8x1lHAtv74nfBIq+9ZgHyopnLspQNNN70CAwEAAaOCA4MwggN/ MDEGA1UdEQQqMCiCEyouYmF5ZXNmb3JlY2FzdC5uZXSCEWJheWVzZm9yZWNhc3Qu bmV0MAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNi LmNvbS9ncC5jcmwwbwYDVR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYe aHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0 dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ 7AyIMsh8reKmAU/abzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDov L2dwLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9n cC5jcnQwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AN3rHSt6DU+mIIuBrYFo cH4ujp0B1VyIjT0RxM227L7MAAABWtFyrmcAAAQDAEcwRQIhAMf6pcUk3SbWrw2n dOOtlNW1dJo93/vKTs1EWwq6h8BwAiBZrL2TfY3h9OWVITgj+LVEQIvOcCDK2XyA tRO2wYsQxQB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWtFy rwMAAAQDAEcwRQIgcluESWcDBMya4Jmk8wkaZVocN6Yn8gxr5fHF9XojTgkCIQDo sf1czo4jInaFuvYW1rbpBEGbsk2F9bCswt4OOpbxjAB2AO5Lvbd1zmC64UJpH6vh nmajD35fsHLYgwDEe4l6qP3LAAABWtFysGMAAAQDAEcwRQIhAIPUP2NqULdkfujw VQzvUOrzBN95ijJTGY7q25ffzvBdAiBS+IRdtbzYqsLA/wUZLw9c+tDtjMDugt8i b+dCfwI5CwB2ALx44d/F9jxoRkkzTaEPoV8JeWkgCcCBtPP2kX8+2bilAAABWtFy r1wAAAQDAEcwRQIhALUh4HcaNJMfXDmmOzzLs9ZU2nAW7DM3j/9R9K5rynkYAiBV or0q/5fOD7fo6zhd2DpDnZNZEJ4PNqmECWf45wdfszANBgkqhkiG9w0BAQsFAAOC AQEAMGkwiFZUJiWYDjzWKwIM76IkCiYgzasgby9w26AkzVcJEAd7B51Ds1lzJFDX qd6J82aHyN/7x7z2RckGRotqEaDRNs7Fl0Ueii7OfIXEg0p56Jz5fqwXzvRBuPCP xGWFPQKANey9+KvoftldaM0GDrMYN8JFWZFo+R/VsKYJs/ccTkVruwaVB2h47Es4 9bw71G+S3aUe5L2IFHXJE87XN46uy0kpBfT96ohtr6wGvQj9Kow3iOJXlq1GwCjB 4K6ZtnMIsv3ExBFsbzahS4wVbstQ64fyLiMEAZs16QlKpMnEoJ+xOYXNjfcxoI9n aYkWremoISkZhJMkyDbTsRhThw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t5x6xZvKWc34XB+S3mS Z5TqtviUSRsqBOVfizI+Y1SajOPhCnFzqSlGFzzOvI5ired26MnWofUzCuegwpoK 6dYmr9i2t4hYYMiivWWmy+doMOApLCbHkG8KM4Wj/W0kaK2X+S5nXeZ9LkiyCqKd kgjs44Qz3iQJknITFE2bGPPilOW++Tr0rlcEWUwdWR9i0hw3lRg1NcFG6Wl4aPs2 H5lE6LPiBvT15RDjWOQi/DEGpzKHCGgB5OYflpZ6F4DQdbZEO4VsMVuYpUWrH7Dm 4JKAaleqR+VjB2gaBMfckKfWS4xYVefk7zHWUcC2/vid8Eir71mAfKimcuylA003 vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 137016859926392577274474129323861461476 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bayesforecast.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28639548636842264454140221151508162467180283001114922399303959910724567979329730847270377954647570709437597065916215997724081950893489069528365083115511619742317400397367732906767225736912619955074511282513346696120422459621128307286901977354352675762937429971607525157505939235816396265205471136993253712040997759101180473112949635261549956105658809637590918283464424133808763178740963678760461868668550113650293879040607861300103770015697539951108768323733457677798828363920233993948252741953820770730405608147458998641879905512311213494563639688094792502426666802075559532728662737695424822350439174272634376239037 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayesforecast.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayesforecast.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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