*.kabuku.io

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 34:51:5f:fa:1e:3f:c5:35:2a:f3:95:f6:b9:74:a9:0d was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.kabuku.io

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:51:5f:fa:1e:3f:c5:35:2a:f3:95:f6:b9:74:a9:0d
Serial Number (int): 69542378471671565811929227894407342349
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 23:01:76:d9:48:f1:39:7b:00:4a:4f:fd:93:e6:00:ff:8d:48:8a:64
Fingerprint (sha256): a8:5f:f5:9c:ef:69:01:1d:9f:07:8a:e0:67:38:45:f6:71:72:b3:bb:1d:a9:b4:41:7d:a9:95:d7:73:e2:d8:06

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate *.kabuku.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kabuku.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kabuku.io
kabuku.io

Other certificates including the domain name kabuku.io

(limited to 100 certificates)
mms.kabuku.io
azcuit.com
mms.kabuku.io
kabuku.io
kabuku.io
angular-on-fire.petriproductions.com
ao-konkursy.pl
www.kabuku.io
*.kabuku.io
connect-bi.kabuku.io
mms.kabuku.io
kabuku.io
www.kabuku.io
datazo.app
partner-portal.goama.com
kabuku.io
connect.kabuku.io
accounts.cloud-stg.kabuku.io
mms.kabuku.io
connect.kabuku.io
mms.kabuku.io
adanaseyhanaku.com
connect.kabuku.io
connect.kabuku.io
swara.ai
connect.kabuku.io
direct.kabuku.io
write.monthtomaster.co
partner-portal.goama.com
mdc.kabuku.io
datazo.app
accounts.cloud-stg.kabuku.io
mms.kabuku.io
www.kabuku.io
speeltuin.boekjekapper.be
www.tensorbrick.com
connect.kabuku.io
www.mjr.contact
www.kabuku.io
www.vendlive.us
connect.kabuku.io
mms.kabuku.io
mms.kabuku.io
*.kabuku.io
connect.kabuku.io
kabuku.io
connect.kabuku.io
css.banked.com
connect.kabuku.io
mms.kabuku.io
editor.kabuku.io
editor.kabuku.io
ramonrodrigues.dev
direct.kabuku.io
mms.kabuku.io
connect-bi.kabuku.io
mms.kabuku.io
mms.kabuku.io
mms.kabuku.io
direct.kabuku.io
editor.kabuku.io
mms.kabuku.io
direct.kabuku.io
analytics.kabuku.io
mms.kabuku.io
mms.kabuku.io
simpletch.com
direct.kabuku.io
www.trueanomaly.com
nganam.ebot.stedu.vn
kabuku.io
mms.kabuku.io
mms.kabuku.io
mms.kabuku.io
connect.kabuku.io
mms.kabuku.io

Certificate

The complete raw certificate details for *.kabuku.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Krg+Z1SaCX6F8qiBZJt
V10Q5b2kR+YnmXCwZoroeJGRdX3W4NO/7DimM5rAj7CP9CcbT5fEn+bHKeaEWd8k
Zv2+GLiKKi7N9gHOEALpOX6zYqxSRCp4T6JXqx19FMzo4J+02DIgGhlsKBR8mcoa
QZvecqQSt1sW2n2f1/6oZdWbfEgH9Po44kdyLcBLZjVWZjJ40EURAJMxQ9wsWD+G
GGpYjylVwM4p+KabQeZ3Z2Ahu6e82xzQqLZfwGek/Aql5u6OzNxIun218wp3Mgvu
DxIVmDPxWuBdOhGM7yfTd2xd1wwlKJofBRsoSJ81Hnccqbs422CL6vUnNfGQABio
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69542378471671565811929227894407342349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kabuku.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27856690573702817245361931091850097354645970397920700718869426548900086470734219444988382536775919826384147765165262565959767020486362657320416458344542933786207291327452130925864089489752222400200953596732651718640731542840168882154006320788548271870277609866393347097668752444628482299344365697652194970774067768109775916156648221145664130406575039023516062213724500029662575624165130485771212637324947658769515854215764146965048632623441270270833681893365417220963460359628938493813015812083119370989370085086132563276682875246730958677758494643425365356177853812756886585617147606306479764602677751298123781154917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabuku.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabuku.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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