*.foxict.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 14:47:d8 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=8Ec8Q8vUHBSvUJjTvhB3dnPWJkyQ/kaR,CN=*.foxict.com,OU=GT36355633+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 14:47:d8
Serial Number (int): 1329112
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: c1:c4:7b:16:75:89:7e:7c:6f:6e:fb:b4:7d:c3:25:19:1d:5c:e2:59
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): a2:d5:58:15:e7:34:45:ad:0e:18:78:4d:c5:5a:b2:ee:a0:f5:6e:98
Fingerprint (sha256): 8d:c0:0b:e6:c5:79:b5:67:9b:d3:71:ab:2b:eb:36:ba:18:1e:5d:39:2c:42:34:39:57:a9:88:3a:d1:37:29:d1

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.foxict.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.foxict.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.foxict.com
foxict.com

Other certificates including the domain name foxict.com

(limited to 100 certificates)
*.foxict.com
*.foxict.com
*.foxict.com
*.foxict.com
*.foxict.com
*.foxict.com

Certificate

The complete raw certificate details for *.foxict.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1329112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-28 12:37:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-31 17:30:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8Ec8Q8vUHBSvUJjTvhB3dnPWJkyQ/kaR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT36355633'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.foxict.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860775745490967957552605661855147884856124096705864100446216904893671297659104531224153123497687549254254646628110856064483879910421045886914338457723983999772333463452864821023272352849493102183430682925298434620376123693710382293687956121703095128205759894549166178257226407867860706293904955165267242117919026644503418194978777728507770530441309359976759697786111419308959328266160400697167431298763620519805018074424112512784621076711053376271531636531416555710327861429884118064522083815130230160120639696573393316376438500339122460046993703335308689314946982550808120457546755143474840082369159881672294347249981181028960821638874034593745557307011379644886521897169326409728842860105005438252443047817293801222573805982286970349229659562107809008850772285795413437993398070143667760280517530578779546569319701949692040137410654489177454613531045214344936208656452323642848759733182629880978669456703292907209928478426965252754125910524371514367026291244331388501971529122120298231352346762548554266655386584076307002969133895575469159232005277378823814519326741114417138997491124866649589761628830952593155436015440440244286031793577054535861709966462493891037184033581287042055226820822087938863463556030230010621730118700483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxict.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1c47b1675897e7c6f6efbb47dc325191d5ce259
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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