www.zurigroup.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 08:bf:98:58:93:f7:0c:43:82:c6:90:17:41:d9:42:c2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.zurigroup.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:bf:98:58:93:f7:0c:43:82:c6:90:17:41:d9:42:c2
Serial Number (int): 11628642610390494404381493078047408834
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:ce:05:6e:28:46:fd:f8:bf:5f:61:65:79:45:ea:9e:7a:71:cc:32
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 36:55:7e:07:9c:2d:46:8d:72:6c:bd:04:53:ff:c4:c3:a7:e2:d2:c4
Fingerprint (sha256): 7b:2a:e1:1c:c5:d0:8e:64:9b:6a:c5:fc:eb:0f:79:a8:aa:56:5d:da:40:50:40:f7:2d:c3:02:d2:f9:86:10:77

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate www.zurigroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zurigroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zurigroup.com
zurigroup.com

Other certificates including the domain name zurigroup.com

(limited to 100 certificates)
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.mybeaconbox.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
assistance-interne.mobix.fr
suporte.oficinasoft.com.br
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.arisoftglobal.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.unidoses.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
ticketing.ibml.com
assistance-interne.mobix.fr
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
productsupport.zurigroup.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
hello.kindtyme.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
www.myecomhelpdesk.com
support.agorasrl.cloud
support.agorasrl.cloud
productsupport.zurigroup.com
support.arisoftglobal.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.musegravity.com
productsupport.zurigroup.com
support.agorasrl.cloud
labs.zurigroup.com
support.agorasrl.cloud
sac.wemystic.com.br
productsupport.zurigroup.com
productsupport.zurigroup.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
www.zurigroup.com
hello.kindtyme.com
support.seccom.ro
support.agorasrl.cloud
support.agorasrl.cloud
support.pngcompressor.com
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud
support.websiteheroes.net
support.agorasrl.cloud
support.agorasrl.cloud
support.agorasrl.cloud

Certificate

The complete raw certificate details for www.zurigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11628642610390494404381493078047408834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zurigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804429954080733737849834863289120068611262737490236395174580424481383318547212729878319440712707627070193851207691553650096469780554187446129084337792668312349688781749036984919918044984982740073120059991901138531419486182617415466968440041841324034549906740188313816164897980810940888465435179017110592600191789279796463932436559313278817030356451860116146646162025996725659606269903244569880088972631692613021044321783805076558302636876282109806428144684316960458386591376570720335215662610957362335879088059697359624368981249867126076872760568479076354487252957125487587245122988521289049250208630835291974225954174237583139803940838812152255612387209599017082710978892397260266097822484641446833830145699757495750441496805560268217071621221009765377612573709250659857045401071349081008414223639730738831109637380771371537549737428585479409065439202701098325625897565428528859998517074585837393740954655268318314150591050430402702674850110018073497635432154991415453679634584098880480176634223974021790141305718381944705962330589120539818300697893813795530697927478455393596926196339573184860476109588791298793546160486563667829337463013792386598557449708697222336596167899438883167451589746932320616533856059489485343435005198893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ce056e2846fdf8bf5f61657945ea9e7a71cc32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zurigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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