spd.nasc.biz

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 61:1a:ed:e1:32:08:79:e0:1e:e3:bb:05:b1:d9:72:22 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=spd.nasc.biz

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:1a:ed:e1:32:08:79:e0:1e:e3:bb:05:b1:d9:72:22
Serial Number (int): 129074940082355873783642610279328084514
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 7f:a6:a1:b4:46:a2:04:fd:75:32:93:23:85:28:7c:2e:da:2a:09:7b
Fingerprint (sha256): 95:1c:4d:b5:54:4c:76:15:d4:54:6b:aa:e0:4d:04:aa:49:f2:17:a3:3e:af:84:8c:f6:19:6a:01:3c:5e:d7:0b

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate spd.nasc.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spd.nasc.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spd.nasc.biz

Other certificates including the domain name nasc.biz

(limited to 100 certificates)
nascngs.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz

Certificate

The complete raw certificate details for spd.nasc.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/mxaBmc+e+dIJoAYwco
jGiAv/qnXwx6IezlpqQTqk7MScZXTzrU9vSdRw6HgCY6svq/ADw3TBlEcxwud0s9
iN5+R1Of6vVQWGfYpPZ4Itdg3tr81F4/PSIHA8DKtsidwwO2OsQjsH7crMEV+6tM
cetei72d1hhY8VuSjwO8B48tLpakHF1p9xSSGfnxXxwxHfjGai1d6XRSlKBbcj4H
PDoIwEaP3DLjA1tge+VdnC1gMevLT6DIoRsfg9QDrkFkhgk5xlNHzrZjP5dphGK8
h0DeUnPB4+iI5lmfuwtCOyhHBfj2qo5gQO7w7rx+mughiPmpDKJ0tv3dPONpwAqQ
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129074940082355873783642610279328084514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'spd.nasc.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30294083091621043989702099378201960617399088125141488132079868437154312160113737682695367889798637678255233075602392941662199103285889476480404305353557280275916807191561262294262071689240430432957032765684483943087525714516199672185399573783012393659461800967867632522629613384541577846525294729856208013974362241692623381629296043492421715937255623160541451757938751653227564519866585715402597587564320660342084489591411548359610287586314099332810232029403481404810690950477557582601818222121890107256595401285696728371621037575090769767442911444819705841059970110487132284206627499900049100994314770670865789653183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spd.nasc.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001529d6cf49e2cd05e26d9e3353b3395f2b0191ff9be6c4fbbe286bae3fd0ef48799fee1b8e4e3be272641a6e9e6de0eec879cc4c92b5e81cc1b47f9a7f1955a4073ee08762cffa424f34afe0a6f0df9dee1ee5d3e163b150a28d816829d028043a69bfab7e17e9315278267d3488b9f8a8f1026e5b853cdeb34115e5a3e5426181d5f34de004d0638ae252171b02e3ba9d1c09b049a5611fa1e393092fe19e7f4173b94a49e5810a56dd327ec5d330ff3536f845b44711b6bd39bd04310994572d469875fe6b424e259025297cb0f145b4b7fc7d9a2ff6b7809f2c7d0ea4b1411fa4382d0555be830346e2243e323a204188b383cfa6445e48a893d88547cdc6