www.ntsled.com
Issued by RapidSSL SHA256 CA - G3
About this certificate
This digital certificate with serial number 08:11:07 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.ntsled.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:11:07Serial Number (int): 528647
Serial Number lenght: 20 bits, 3 octets
SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59
Fingerprint (sha1): de:48:63:16:7a:db:9e:b3:0a:8c:5e:c9:95:09:4b:9e:0a:ba:31:d6
Fingerprint (sha256): a2:2e:ae:7a:35:c3:49:4e:97:2e:e2:a6:4b:10:a6:86:bb:34:c9:fa:8c:01:ae:a0:71:03:23:e0:8c:5a:7c:23
Issuing Certificate URL: http://gv.symcb.com/gv.crt
Revocation information
OCSP Server: http://gv.symcd.comCRL Distribution Point: http://gv.symcb.com/gv.crl
Check the revocation status for certificate www.ntsled.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ntsled.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ntsled.com
ntsled.com
ntsled.com
Other certificates including the domain name ntsled.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ntsled.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIDCBEHMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy NTYgQ0EgLSBHMzAeFw0xNTExMDMxMzA4MjBaFw0xODEyMDUwMDM2NDZaMBkxFzAV BgNVBAMTDnd3dy5udHNsZWQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAqTaZxcIZXQGXruVcSfkMQTAGrTZQCumDprEe+xDPOTwkIHEYz/sks48Q kroR42n+wrHZc6sNG9zVgmA7iUbym9OCzSSXqoNXm5Y+ThZKAPF6icOHjUfcbrVV MQgx4JWLtuMQmrFrDA1mZ3nAI5nwT0kiDZ0zqch5qD2uvu35olEMJ0d2ToHKr/Ls G4ds+nObFkAn5tXdA87YQbZ4a2c4HtB/cHPhEwHJEFLkfMuYrBjYVi7dYpwLZ3DD uu3kOfhvGjZ4m7c3TIkzrbSuDNwNEKtcG8HmEpwdRaKWDPQtONUhcQQ51cUE28Ki QGj/2COuRa5J7mAE7j4P7cBB8+c2ACZikauZA6B6hYUdMso8zevlOkwMkNQrOHt5 BUYeY3NcwMEQkDwnK+UbIAN3bVlH5XI/45HPmy4ae3iUs5vwBYrTup0RZ6wZ7PQ+ jXfUnMXOeSSh+KvV32lNf7DQ6wzw58mULB3RlDQdVgNxOcy2Nh6Y46sItuq5rmEz WdPxYsCSkkg3/Z4NirtFzOKGNw52j9RgyjMNSyC68aF8Qk8Clhz+TE8/v/BP92fP +XZz9cw5goz40KRpeBlWAGjL4FdOTrruHoWp7QndYeMVyved+dkjYT+kBCpQEEp9 RsRqKtI4lkvEK07UOSzZLDm1vbFadBaa4PmkEd5fX+FMjhXNkrkCAwEAAaOCAVIw ggFOMB8GA1UdIwQYMBaAFMOc8/zTRgg0u85Gf6B8W/PiCMtZMFcGCCsGAQUFBwEB BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d2LnN5bWNkLmNvbTAmBggrBgEFBQcw AoYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcnQwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAlBgNVHREEHjAcgg53d3cubnRz bGVkLmNvbYIKbnRzbGVkLmNvbTArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Yu c3ltY2IuY29tL2d2LmNybDAMBgNVHRMBAf8EAjAAMEEGA1UdIAQ6MDgwNgYGZ4EM AQIBMCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdh bDANBgkqhkiG9w0BAQsFAAOCAQEAMUifmF2jfeJ6mdLirz/jvPW/jMskcXpZEBE3 YC59X0eahHn3U2FpF6LcK9cvlv4eU3kAu2+CMRxcRQlOEWegol1Cf5BYZ0yZ7zJX y9vgDVHl6t2ACw8Y2N0XD29tmA+126g32XrXtz1z03/nbM7R8PjN/CKEZvPCVz2c Ghws8kzsIIYK5PuqRjswhLxbvgOMxufY8TTbHDghKqAN9/4EgZ6y5Q+an4D6TZfE aaVtjFAkcJo5ADujOOY4wjWbxcOL57sZ6qqLpWxoqm8SqBdmJo/ISMBnPaPli3bd 9nrBLzlhXgRt5CBjqVvo5ryKeZGqxSclBuShE67Jk67FDwihtQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqTaZxcIZXQGXruVcSfkM QTAGrTZQCumDprEe+xDPOTwkIHEYz/sks48QkroR42n+wrHZc6sNG9zVgmA7iUby m9OCzSSXqoNXm5Y+ThZKAPF6icOHjUfcbrVVMQgx4JWLtuMQmrFrDA1mZ3nAI5nw T0kiDZ0zqch5qD2uvu35olEMJ0d2ToHKr/LsG4ds+nObFkAn5tXdA87YQbZ4a2c4 HtB/cHPhEwHJEFLkfMuYrBjYVi7dYpwLZ3DDuu3kOfhvGjZ4m7c3TIkzrbSuDNwN EKtcG8HmEpwdRaKWDPQtONUhcQQ51cUE28KiQGj/2COuRa5J7mAE7j4P7cBB8+c2 ACZikauZA6B6hYUdMso8zevlOkwMkNQrOHt5BUYeY3NcwMEQkDwnK+UbIAN3bVlH 5XI/45HPmy4ae3iUs5vwBYrTup0RZ6wZ7PQ+jXfUnMXOeSSh+KvV32lNf7DQ6wzw 58mULB3RlDQdVgNxOcy2Nh6Y46sItuq5rmEzWdPxYsCSkkg3/Z4NirtFzOKGNw52 j9RgyjMNSyC68aF8Qk8Clhz+TE8/v/BP92fP+XZz9cw5goz40KRpeBlWAGjL4FdO TrruHoWp7QndYeMVyved+dkjYT+kBCpQEEp9RsRqKtI4lkvEK07UOSzZLDm1vbFa dBaa4PmkEd5fX+FMjhXNkrkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 528647 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-03 13:08:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:36:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ntsled.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690329969819544939527260718347778675770378732136654472607898654740554576322333149245485851218121805185859603119974371983874602776336424087861208930352206026133574247651176010974429113044171049136146357680541050099753534295028184404851212495400536956560732480046709626010769746381932328000639730925448001081512707092339479239152888944730029353383855934705012271287469828655167722898375316585016222348823639643723216901866444170371217270191370173589157466614552694016146895995179427479652140249262288808413317308338602797190474811071270922648477294663667365921788928396548765581008371165986756641560984953269989518550888623113747513992033288488254447018074646334017770887719163528866100086420666861290053605802427042678403876092063936294726431422018457397442475887398097524616991254297887471271793296266662239636610641562808738419767254782668268221237989843813176055925695342114563908805200048181373880191878738033450101655450354264419556891771851945462157856780021468718674078388747753654635409369858082813607201488966492296444177634539250706334405051156336515451587460930711204488963884510654204026806021693793677951434307332695422048892391792327396991800984728543340833141073604283964450507614192251999379716520459718461361490858681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntsled.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntsled.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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