artwork.kleen-tex.eu

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 0f:ae was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=artwork.kleen-tex.eu,OU=GT50457686+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ae
Serial Number (int): 4014
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 2f:04:04:7e:74:8f:c3:23:b4:0d:7b:1a:6d:19:f9:66:43:cf:2f:a8
Fingerprint (sha256): 7b:e5:11:ca:51:b2:c9:94:04:f1:42:3f:df:dc:ee:38:08:13:0c:5f:70:1b:9e:28:68:d6:d1:1a:e1:dd:6e:cd

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate artwork.kleen-tex.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artwork.kleen-tex.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artwork.kleen-tex.eu

Other certificates including the domain name kleen-tex.eu

(limited to 100 certificates)
www.artwork.kleen-tex.eu
kleen-tex.eu
ithelp.visionrt.com
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
support.erm.com
www.artwork.kleen-tex.eu
ithelp.visionrt.com
helpdesk.troax.com
artworkcore.kleen-tex.eu
artworkcore.kleen-tex.eu
artworkcore.kleen-tex.eu
soporte.llorenteycuenca.com
portal.kleen-tex.eu
*.kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
support.erm.com
kleen-tex-co-za.acriba.eu
kleen-tex.eu
servicedesk.hermesairports.com
helpdesk.fast.eu
kleen-tex-jp.acriba.eu
helpdesk.kleen-tex.eu
it.littlegarth.org
kleen-tex.eu
it.littlegarth.org
kleen-tex.eu
soporte.llorenteycuenca.com
kleen-tex.eu
artwork.kleen-tex.eu
webmail.kleen-tex.eu
kleen-tex.eu
artwork.kleen-tex.eu
servicedesk.hermesairports.com
kleen-tex.eu
artworkcore.kleen-tex.eu
kleen-tex-jp.acriba.eu
soporte.llorenteycuenca.com
kleen-tex-co-za.acriba.eu
*.kleen-tex.eu
itdesk.mkspamp.com
kleen-tex-co-za.acriba.eu
servicedesk.hermesairports.com
support.erm.com
kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
xen.kleen-tex.eu
artworkcore.kleen-tex.eu
kleen-tex.eu
kleen-tex.eu
servicedesk.hermesairports.com
helpdesk.troax.com
kleen-tex.eu
kleen-tex.eu
helpdesk.troax.com
helpdesk.troax.com
kleen-tex-co-za.acriba.eu
*.kleen-tex.eu
kleen-tex.eu
soporte.llorenteycuenca.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
kleen-tex-jp.acriba.eu
servicedesk.hermesairports.com
kleen-tex-jp.acriba.eu
mobileemail.kleen-tex.eu
portal.kleen-tex.eu
helpdesk.kleen-tex.eu
kleen-tex-co-za.acriba.eu
servicedesk.hermesairports.com
spamfilter.kleen-tex.eu
www.artwork.kleen-tex.eu
artwork.kleen-tex.eu
it.littlegarth.org
kleen-tex.eu
artworkdev.kleen-tex.eu
servicedesk.hermesairports.com
kleen-tex.eu

Certificate

The complete raw certificate details for artwork.kleen-tex.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-16 14:06:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 20:25:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT50457686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artwork.kleen-tex.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852394335357210774010712379458707988997666140974041845032822190721917342543925934920595297169606675113833926002310588725240978514718165470162761373209527844729885448318412090443158382421906450373927071600331687298233301009511868304523720466422590148211697031777988852177095050190008283988247073240227912683149167041745810176868008891404733334107829255310751132358634107520482050239896439148229584879004607623289794099707235663470485237470705647791731493282868852137434674489546727371542514046984276201053147688910810798344337667913624759984058955716998114416277270575590223198497827000908501632606681686416980067794979970012804037057501655490161837666267173542292600455141984831171525789594397903662601472960732733657380117451132785595749041826520599460357596520535600635791402519170263788800815118982802406048343858686869730760818450849371804236303186285708536794700680803841682784420872506331712299211285493064392462582875026539644328044327455620428352568483565145601843651050113683035812196165381913888653956707596252766671434648144654433662739650579684370412997628429892036803218292497503325574769434638376626816551832574287804535485845107870680967453716011223536194011307734592207500804597709327196909836574847515689034530328569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.kleen-tex.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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