*.split.hr

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 09:b4:2f:a5:45:a2:d2:b8:fb:55:4c:97:03:6e:13:02 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.split.hr

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b4:2f:a5:45:a2:d2:b8:fb:55:4c:97:03:6e:13:02
Serial Number (int): 12898631764050005081118538881731269378
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): b9:4f:bc:a4:73:f4:ce:c8:db:af:a0:64:01:7c:f7:1f:bf:da:6d:96
Fingerprint (sha256): 95:6e:48:9a:5b:46:25:3d:dc:12:fb:55:97:01:14:fb:59:e1:c8:a6:ff:78:05:bc:94:cb:ab:49:dc:cd:1d:e9

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate *.split.hr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.split.hr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.split.hr
split.hr

Other certificates including the domain name split.hr

(limited to 100 certificates)
web.split.hr
sjednice.split.hr
web.split.hr
es.split.hr
sjednice.split.hr
sjednice.split.hr
web.split.hr
web.split.hr
sjednice.split.hr
mail.split.hr
es.split.hr
otpadnijesmece.split.hr
web.split.hr
sjednice.split.hr
mail.split.hr
web.split.hr
es.split.hr
*.split.hr
sjednice.split.hr
es.split.hr
otpadnijesmece.split.hr
web.split.hr
es.split.hr
*.split.hr
es.split.hr
sjednice.split.hr
splitsrv.split.hr
web.split.hr
es.split.hr
sjednice.split.hr
es.split.hr
es.split.hr
web.split.hr
web.split.hr
*.split.hr
mail.split.hr
sjednice.split.hr
sjednice.split.hr
*.split.hr
web.split.hr
es.split.hr
es.split.hr
*.split.hr
sjednice.split.hr
*.split.hr
web.split.hr

Certificate

The complete raw certificate details for *.split.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAff9ztWqtsFYTII7N9Y
0VDtjZYOIgDZfeveRBMZk5dslaC05q+OG/jcHyO1biiU0ZRFpELor+O21vdws61R
MkVuBJppsfZdfaPLl+lYw4BNZ7rtmOC/zDK31ZPxsaCrmljc+k8JeVAI62jVkpyi
uNF0/PLvwWd0kV8IgpuYXiWHxQ2khYRBr/1Q6Gva66UKw3qD/F4+PjFCNJhbnyns
PopJGkoX/OgGe2Xh7Yo62R7G7ojL2P3lQFYP/K0hdKAoO84IEHepS8y5011OM/HM
8iGSXQUFRWe9bWOWMBclBDHcmo7MVhidhCHuNwKlkqbLu9z420nbgrPHVqU345jv
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12898631764050005081118538881731269378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.split.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17677245936505632973148824241599837167656505681143301864926358322412093911347403605239574110582040618427213148292265106970990738764550150684418759747687308901949518679391284370173059825499391278916458316232018059500832972632803535793478092291448673193536582219333860801855824149843097662842500860448312605052926102012275420520282884391023152701213765996179417677245558335921380911697117307053366363612666706345745790525177237709030589382835860891313209607408242904656961870791687667587067451769311512186203033266270274334262438318816582525566656217350333266334954894833234853640352353837130543788277487781973878960021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.split.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'split.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d5aa5ae5c0000040300483046022100f8cfb042b0215ae89049c83a4e31c66c92f33280a3d12cf5b8072e3a1a8e6427022100cd7a2c2d9cbdd672d60bcf5685b6a97bea6a052878fb64c5a3556a0534692c38007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d5aa5ae7e00000403004730450220184e001c920b31cba0c873553d6273b42c6b9e27eceebab45512dde0a8f2ad15022100a6b547ba069d3ac24059e3fcff7269d29527133bd17e4c407fbeb4058f99ce36007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015d5aa5b05f000004030047304502204cf66e500a41c539e536e1b090cb7633c1dfaf12fc4e4706ae330c6f405980940221009b2a215d4115e9f0aafd666d957fa717e13480f10e52cb7cf1af0e753cee26a9007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015d5aa5af590000040300463044022079d4d6dfa56ff90046ab30c80af10d3facb7f1d7fbbc01f64493ac423b4997f70220299142c41d3a235ce7421ab57dbe49e93b40d5577aab47a29c09d89d0d8e49b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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