excas.citynet.net

- Citynet Holdings LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:11:3a:5a:86:e8:50:51:2e:5b:4d:1f:a8:ce:a7:d8 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Citynet Holdings LLC

Organization: Citynet Holdings LLC
State / Province: West Virginia
Locality: Bridgeport
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:11:3a:5a:86:e8:50:51:2e:5b:4d:1f:a8:ce:a7:d8
Serial Number (int): 20027872535412309636973177768072095704
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:08:0c:f1:e0:33:58:0a:a9:99:db:35:ac:0e:f2:4e:cf:01:8e:1c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 51:0d:b7:64:c9:b4:9f:a8:f4:e0:7c:21:07:dd:85:11:b5:4c:cd:6f
Fingerprint (sha256): 95:58:db:f1:ae:38:28:b0:9b:77:0f:3c:86:b4:ac:ff:5f:4e:a5:b8:59:01:6d:89:e3:4f:9e:15:0a:00:7e:d0

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate excas.citynet.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for excas.citynet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

excas.citynet.net
brptwvexcas1.admin.citynet.net
autodiscover.citynet.net
excas.admin.citynet.net
brptwvchexcas1.admin.citynet.net
brptwvexcas2.admin.citynet.net
admin.citynet.net

Other certificates including the domain name citynet.net

(limited to 100 certificates)
excas.citynet.net
webtools.citynet.net
www.citynet.net
securehosting.citynet.net
www.citynet.net
secure.citynet.net
www.citynet.net
stream.citynet.net
retailstatus.sts.pl
www.citynet.net
status.sirocco.global
cucm-pub01-ms.admin.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
sni.cloudflaressl.com
www.citynet.net
*.citynet.net
itraxx.citynet.net
www.citynet.net
cms.citynet.net
cms.citynet.net
status.meshcaid.com
excas.citynet.net
sni.cloudflaressl.com
*.citynet.net
status.sirocco.global
intranet.citynet.net
www.citynet.net
status.sirocco.global
status.sirocco.global
ce.citynet.net
webtools.citynet.net
www.citynet.net
tlspeering.citynet.net
www.citynet.net
status.meshcaid.com
www.citynet.net
vcloud.citynet.net
*.citynet.net
www.citynet.net
livegrades.citynet.net
secure.citynet.net
www.citynet.net
securehosting.citynet.net
excas.citynet.net
excas.citynet.net
www.citynet.net
livegrades.citynet.net
www.citynet.net
secure.citynet.net
securehosting.citynet.net
netpulse.citynet.net
www.citynet.net
www.citynet.net
status.sirocco.global
www.citynet.net
livegrades.citynet.net
excas.citynet.net
www.citynet.net
gateway.citynet.net
accounts.citynet.net
status.citynet.net
sni.cloudflaressl.com
retailstatus.sts.pl
secure.citynet.net
*.citynet.net
*.citynet.net
stream.citynet.net
www.citynet.net
securehosting.citynet.net
status.sirocco.global
statuspage.onmex.mx
excas.citynet.net
ce.citynet.net
itraxx.citynet.net
status.sirocco.global
excas.citynet.net
excas.citynet.net
www.citynet.net
status.sirocco.global
*.citynet.net
status.meshcaid.com
*.citynet.net
sni.cloudflaressl.com
status.sirocco.global
excas.citynet.net
www.citynet.net
*.citynet.net
www.citynet.net
excas.citynet.net
status.meshcaid.com
statuspage.onmex.mx
*.citynet.net
www.citynet.net
www.citynet.net
excas.citynet.net
www.citynet.net
status.citynet.net
status.sirocco.global

Certificate

The complete raw certificate details for excas.citynet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/58Moz+HN32vBwFtI3h
RZtRd2TX8YTETVMzXIXJkpWaKdnpYm3t+0aFX0y++9VUKDeOGMxHL6SQdUaQlgNq
CgUxg+4luCj0hSNaGHSGlITb5E7HJ75k2fIK6taqSOFLqO37KmtDPg6U9JWe2X83
Rf0pi7yEL6uq3z5+wq4VSmSuAeamjNRbIH+hyt3hf6H6fsE+WutFnXwEug/fLNeo
sS8M40pLPUkFqPLG7uCls9liYyWM1XNs7o0Slho57ifjHK+MyxWCWIOOfgBMe81Q
FFAutTujfqYYtMfnAEF+5ge990txzLpBvzB1qvv37EGXZjLnM+26ZuY7j26EKbLM
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20027872535412309636973177768072095704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bridgeport'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citynet Holdings LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'excas.citynet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27266726870489375677229724264601350107818830238943901650527429941970383353024146035404719354145645808394670598544203077298217335853880092241162553861699924251820469822421952180509894259071265765745579747575166176471381536662468601621244863225647828394862215014589839572628535033994619501812989205095321237729992226838838695456549817894083124622086830403035552429151294813649525863199783287567651445559827366143345356541910110417943915943460496408265986633380869071460305517506217543559617902709571287961295903702220025184952397159061013822879194962553142076791103415763475317095219883533236062984011079391491807956221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96080cf1e033580aa999db35ac0ef24ecf018e1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excas.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brptwvexcas1.admin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excas.admin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brptwvchexcas1.admin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brptwvexcas2.admin.citynet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.citynet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00347e7ce499f9eabc12146d8567a041ab532dbd320e542cbf8cc539ae09320598e10330727d0e9461b30d67569b2c2b2c644445231eb4e1cdc17769c3f6c515bebfebe9a481e316854941d747a4480d0fc95ed1f434930e0751bd958af314af084f8d83200892fd7bce5033dc442e4a39aeff34d50dc7d2e7fca721f3307508adee5e7cf74c906e2e24fdca3d230a5ef920a24798357c2597ac3299ddcf4c5f81071d95fc2ff73342d676c169dd606b84b671c987cc35a9d7f77b49642f0c76d7438d052390558d859415b24894f3f0c1711b4463ef0b54a0fc7da8f6cb434da24b94596787a6179789bc107242ac50a941ec44d34f19fbc47770c4ffc9974990