www.branzone.com

- Branzone, Inc. -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 29:33:09:2c:6e:65:2c:45:4c:3b:80:3d:d1:81:1d:5d was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Branzone, Inc.

Company registration number: 800319602
Organization: Branzone, Inc.
State / Province: Texas
Locality: The Woodlands
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:33:09:2c:6e:65:2c:45:4c:3b:80:3d:d1:81:1d:5d
Serial Number (int): 54763341028858072141348562055704157533
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 6e:73:39:ec:74:ed:e7:fe:64:8a:aa:73:c9:24:31:04:f1:fc:5a:42
Fingerprint (sha256): 93:72:71:2b:01:c6:0a:0b:bf:53:20:d3:02:8d:10:63:ad:54:36:a8:40:24:7a:83:88:6f:bc:24:be:37:c2:aa

Issuing Certificate URL: http://ga.symcb.com/ga.crt

Revocation information

OCSP Server: http://ga.symcd.com
CRL Distribution Point: http://ga.symcb.com/ga.crl

Check the revocation status for certificate www.branzone.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.branzone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.branzone.com
branzone.com

Other certificates including the domain name branzone.com

(limited to 100 certificates)
branzone.com
ronihenderson.com
robert.branzone.com
t2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
robert.branzone.com
t2.branzone.com
mail.branzone.com
robert.branzone.com
ns1.branzone.com
branzone.com
ccfwichita.com
branzone.com
branzone.com
gavinmiller.branzone.com
robert.branzone.com
proton.branzone.com
secure.branzone.com
branzone.com
branzone.com
t2.branzone.com
branzone.com
robert.branzone.com
tca.branzone.com
robert.branzone.com
electron.branzone.com
dev.branzone.com
branzone.com
www.branzone.com
forum.branzone.com
nucleus.branzone.com
t2.branzone.com
branzone.com
dev.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
www.branzone.com
dev.branzone.com
t2.branzone.com
robert.branzone.com
branzone.com
ccfwichita.branzone.com
proton.branzone.com
branzone.com
dev.branzone.com
dev.branzone.com
control.branzone.com
dev.branzone.com
secure.branzone.com
t2.branzone.com
ccfwichita.com
ronihenderson.com
ccfwichita.com
rhrealty.com
t2.branzone.com
ronihenderson.com
ssl6962.cloudflare.com
control.branzone.com
forum.branzone.com
forum.branzone.com
branzone.com
control.branzone.com
forum.branzone.com
gavinmiller.branzone.com
tca.branzone.com
tca.branzone.com
control.branzone.com
t2.branzone.com
tca.branzone.com
proton.branzone.com
ccfwichita.com
web.branzone.com
ccfwichita.com
gavinmiller.branzone.com
t2.branzone.com
dev.branzone.com
ssl6962.cloudflare.com
forum.branzone.com
branzone.com
branzone.com
gavinmiller.branzone.com
ns2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
rhrealty.com
t2.branzone.com
dev.branzone.com
www.branzone.com
branzone.com
ccfwichita.com
vm.branzone.com
t2.branzone.com
dev.branzone.com
t2.branzone.com

Certificate

The complete raw certificate details for www.branzone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh3OJsMu3jo0J8+LZyx1
UKIsd4ZS/n0aqGCQGlbkTep1zT2aUKjUhFRafp1lihYUvQ6Np42qvZb288Ka7hmk
alMQXf7k/66a9AGHv3NY0BhHNqmd0jZZQ89Jte+TtKiIRf9co7XIT4o1Vk3TmJVh
3Lxr/kaiG+1ZbEdERSl8YjWM0sCDGxkyq+QPCYDpS9PQxXgMHBQEXNPz2xFF3Lr4
Qsw0xB+xTVx5hXG3VkXVBzIQs7LGJy6CNlGdAnnulh9Me8D/gxShTxg1x1zKH+06
KkcQFPHZZF6goR7gLldZm/hIo6GaNF+T9R19yLiKxNdbtvSy6tfthu/AHoC2AsQk
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54763341028858072141348562055704157533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800319602'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Woodlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Branzone, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.branzone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26019788353851575781663270791869680308318909710047158553563007451286552779338601519728655907168241841180679703956087592373772844604997491887242593810254563313674116961684677951590164230735296066035269398008576620396737005959062391864808577783748609011105326661573277014953226478445421964082226587493505270336142200120113383193568209311938117006387442670988801493403688556531123134545680572762347708682127442014737945114906706328069488093488507257343353420778690481871773143212150411562486551008685913444487811101314489931769174698171826771597423978618746038339762390881346516821756855481577093387266884523053575054389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branzone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcb.com/ga.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ga.symcb.com/ga.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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