ssltest41.ssl.symclab.com

- Thawte Inc -

Issued by thawte Primary Root CA - G4

About this certificate

This digital certificate with serial number 07:3f:9c:0f:45:27:d6:6f:c5:92:20:65:67:ef:02:b2 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Thawte Inc

Organization: Thawte Inc
Organization unit: Thawte DSA SSL - FOR TEST PURPOSES ONLY
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Certification Services Division
Organization unit: (c) 2012 thawte, Inc. - For authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:3f:9c:0f:45:27:d6:6f:c5:92:20:65:67:ef:02:b2
Serial Number (int): 9634875938305339058365453922701607602
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b1:25:0d:12:53:47:e5:7c:d7:8e:a8:31:9b:cd:b1:ff:e4:79:9b:b5
AuthorityKeyId: c7:67:89:64:22:f1:9d:b1:f3:8b:83:a6:c2:0e:99:93:51:76:eb:96

Fingerprint (sha1): f3:75:a2:41:b1:39:40:94:ab:78:a4:a9:48:44:91:32:a3:d3:36:8d
Fingerprint (sha256): 79:ad:43:ca:1f:d5:7a:fa:2b:98:ba:c1:81:8e:72:90:96:da:6f:88:e1:02:c0:57:ed:a8:9d:58:ce:8d:d2:47


Revocation information

CRL Distribution Point: http://crl.thawte.com/ThawtePCA-G4.crl

Check the revocation status for certificate ssltest41.ssl.symclab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssltest41.ssl.symclab.com

Public Key Algorithm

DSA

Key Size

2042

Signature Algorithm

DSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssltest41.ssl.symclab.com

Other certificates including the domain name symclab.com

(limited to 100 certificates)
PTNR-MSSL-ADMIN.BBTEST.NET
seal-test.symclab.com
pd-vcceKs1-padmSEv1RsaSha2Mix.symclab.com
pv-userservices-auth.vip.symclab.com
ptnr-ssltools.websecurity.symclab.com
samea3.websecurity.symclab.com
ft-pki-internal-svc.symclab.com
ptnr-kirby1.websecurity.symclab.com
ptnr-pki-idp.symclab.com
ft.m.vip.symclab.com
dev-vsc.ws.symclab.com
ptnr-domainauth.ws.symclab.com
ptnr-getcert.websecurity.symclab.com
ssltest37.ssl.symclab.com
proto-pki.symclab.com
ptnr-kirby1.websecurity.symclab.com
ciplus-auth.pki.symclab.com
ptnr-mmadmin.websecurity.symclab.com
ft-enterprise-ssl.websecurity.symclab.com
proto-pki-manager.symclab.com
ft-vsc.bbtest.net
www.symclab.com
userservices-auth.gdev.vip.symc.io
ptnr-enterprise-ssl-admin.jp.websecurity.symclab.com
ptnr-sso.websecurity.symclab.com
igw-edc3.websecurity.symclab.com
ft-pki.symclab.com
ptnr-certmanager-webservices.websecurity.symclab.com
proto-pki-reporting.symclab.com
ssltest36.ssl.symclab.com
www.symclab.com
trustsealinfo.websecurity.symclab.com
ptnr-enterprise-ssl.websecurity.symclab.com
g20.sam.symclab.com
ptnr-kirby1.websecurity.symclab.com
ptnr-mmadmin.websecurity.symclab.com
ptnr-pki-scep.bbtest.net
gateway.symclab.com
ptnr-cicsensor.websecurity.symclab.com
ptnr-enterprise-security-center.geotrust.symclab.com
proto-testdrive-pki-manager.symclab.com
trustblade.ws.symclab.com
ft-idprotect.vip.symclab.com
ssltest46.ssl.symclab.com
ft-pki-internal-svc.symclab.com
ptnr-ssltools.websecurity.symclab.com
ptnr-ct.ws.symclab.com
test.symclab.com
ptnr-enterprise-ssl-admin.jp.websecurity.symclab.com
www.rsaSha2.symclab.com
ft-pki-est.symclab.com
dev-securesigning.websecurity.symclab.com
ptnr-mcelp-webservices.bbtest.net
?.?.symclab.com
ptnr-mmadmin-enroll.websecurity.symclab.com
login-int.norton.com
ptnr-pki-scep.symclab.com
ptnr-cmsproxy1.symclab.com
idc-pki-est.symclab.net
ptnr-pki.bbtest.net
idcenter.vip.symc.io
ft-vsc.ws.symclab.com
ptnr-ssp.bbtest.net
joetestroot.symclab.com
ptnr-pki-internal-svc.symclab.com
ptnr-vipeg.vip.symclab.com
ptnr-kirby1.websecurity.symclab.com
ptnr-ssl-certificate-center.thawte.symclab.com
vsc.ws.symclab.com
g11.sam.symclab.com
ssltest42.ssl.symclab.com
pd-vcceKs1-padmSEv2Dsa.symclab.com
ptnr-mmadmin-enroll.websecurity.symclab.com
ptnr-login.vip.symclab.com
ptnr-certmanager.websecurity.symclab.com
ptnr-ct3.ws.symclab.com
ptnr-cic.websecurity.symclab.com
userservices.vip.symclab.net
ft-pki.symclab.com
g8.sam.symclab.com
ptnr-enterprise-ssl-admin-jp.websecurity.symclab.com
ptnr-certmanager.websecurity.symclab.com
jimwong.symclab.com
samea1.websecurity.symclab.com
proto-pki-cmp.symclab.com
ptnr-certmanager.websecurity.symclab.com
ltm1ptnr.symclab.com
ptnr-manager.vip.symclab.com
ptnr-pki-reporting.symclab.com
idprotect.pv.vip.symclab.com
pd-vcceKs1-padmSpEv1RsaSha2Full.symclab.com
abc.symclab.com
login-int.norton.com
ptnr-pki-scep.symclab.com
ciplus.pki.symclab.com
even1sanityMmr155.symclab.com
ssltest37.ssl.symclab.com
ptnr-cic.websecurity.symclab.com
login-int.norton.com
pd-vcceKs1-padmSEv1O2Sha2Mix.symclab.com

Certificate

The complete raw certificate details for ssltest41.ssl.symclab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9634875938305339058365453922701607602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.3.2 (dsaWithSha256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Services Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 thawte, Inc. - For authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Primary Root CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte DSA SSL - FOR TEST PURPOSES ONLY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssltest41.ssl.symclab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10040.4.1 (dsa)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23828233103909125676892290576380664461167980512609515081947364625850613621007234174900338182066633725443990114066340132945121911184071191498256670613088027700955531048060642887048239980718861948302192632129859565124491062256847212565800783811275825215675011858809275195400862174712036211991048597742882482374684540212007378309580551366062249967805195889642095446164511573777598230573983753917099909542926090384626191603813416224630751520381185752480137430133459927701013680135880470484815121381147338800348056074147966034935816014672620264729800083806369477898593576576006708836546115791555022401735698374411639940219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 82280690305538678197446504608356318990790627376275571575277286584266720649497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3013906675484594816335272552429943635140283633648634545498942531568373640888036103953223719748184167614183428741846023068149980896982675796586559036663919617460343712829490491356517201567153298079800486710765261704563760356674235969921267706762367609099403114562700420172025118761505543052334767603751582610230166593878707023000698116933973849315165080741296798629706257332339189019567820428216111987389041901076195009927895693824782475202427412489768713270213149884729856316329051209048132074920839119889839935641575778639380429070015512934988186012863193008721403614460262105231897209498500157061567216909292058193
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2080 bits)
 . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 270803108040932339990446891011210156994449497705455459290087194471506393354522412905161614900181389474770688622150737397353520305332479306084361095632881610631416036643876524778562689813389330339977748181480792840562587659525599261444793180716805698561399512759588447270485360546270645384633064773240030483983980437210172513030672471914188053608068487135864932955840053456152763220252701324210252908873750764927653676977725898855209790149365766616416250622075029041209602589118438271628049100764758968931110402867259684506040395398057923099547290708747407357452075585388823779389657249057038782575717241737434495922

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawtePCA-G4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssltest41.ssl.symclab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1250d125347e57cd78ea8319bcdb1ffe4799bb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c767896422f19db1f38b83a6c20e99935176eb96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.3.2 (dsaWithSha256)
 . . . . [c:0|t:3|false] BIT STRING (576 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 75784150649532794334483375284702177869399596995789185732118995118275322967267
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 63238686778828534906082622770032364098442785155614086560780326417151901527610