www.shopmcafee.com
- Network Associates -
Issued by NAI SSL CA v1
About this certificate
This digital certificate with serial number d5:b8:56:3a:0e:12:cb:a7:65:53:1d:75:2d:6f:19:62 was issued on by Network Associates.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
- For certificates valid after 31 Dec 2013, all certificates using RSA public key algorithm MUST have 2048 bits of modulus (BRs: 6.1.5)
Network Associates
Organization:
Network Associates
Organization unit: IS
Organization unit: IS
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
Network Associates
Organization:
Network Associates
Organization unit: NAI Certificate Services
Organization unit: NAI Certificate Services
This certificate has expire since
Certificate Details
Serial Number (hex): d5:b8:56:3a:0e:12:cb:a7:65:53:1d:75:2d:6f:19:62Serial Number (int): 284082694610972341613703943998223096162
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 43:5c:67:db:11:7e:70:f6:be:58:56:5b:a2:94:36:d0:e8:3b:52:2b
AuthorityKeyId: 2d:1e:18:f0:30:a7:56:b4:6a:95:6b:d3:78:6d:8d:7b:e3:51:a2:c0
Fingerprint (sha1): 3f:61:1c:5c:55:00:bc:7a:23:d8:41:e4:e4:74:29:18:9e:6c:4d:57
Fingerprint (sha256): a8:90:df:e6:a8:73:77:85:6a:6f:68:f1:57:e8:8f:3d:d8:8a:f9:37:04:8c:0b:a1:aa:bc:fa:ec:e6:11:80:af
Revocation information
CRL Distribution Point: http://pki.nai.com/pki/NAI SSL CA v1.crlCheck the revocation status for certificate www.shopmcafee.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.shopmcafee.com
Public Key Algorithm
RSA
Key Size
1024
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Key Agreement
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.shopmcafee.com
Other certificates including the domain name shopmcafee.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.shopmcafee.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElzCCA3+gAwIBAgIRANW4VjoOEsunZVMddS1vGWIwDQYJKoZIhvcNAQEFBQAw WDEbMBkGA1UEChMSTmV0d29yayBBc3NvY2lhdGVzMSEwHwYDVQQLExhOQUkgQ2Vy dGlmaWNhdGUgU2VydmljZXMxFjAUBgNVBAMTDU5BSSBTU0wgQ0EgdjEwHhcNMDUw NDE4MTkyMTA4WhcNMTkwNzI3MDkyNjU4WjCBqTELMAkGA1UEBhMCVVMxEzARBgNV BAgTCkNhbGlmb3JuaWExEjAQBgNVBAcTCVN1bm55dmFsZTEbMBkGA1UEChMSTmV0 d29yayBBc3NvY2lhdGVzMQswCQYDVQQLEwJJUzEbMBkGA1UEAxMSd3d3LnNob3Bt Y2FmZWUuY29tMSowKAYJKoZIhvcNAQkBFhtob3N0bWFzdGVyQGRpZ2l0YWxyaXZl ci5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANjMkrgPRZSAb5EUArBE AgtOKOF9V/3iFWBKwHHCGNrQyEaW/eIywxr0AuSASUdCEMjPlzZDz5bu8OEN03i+ 9TPq062VOZ+l+7F+Rv+GTl0hb2hY07NkNY98s01get40sql0+VfxyKRy82ziV3+u ib1ARG4ZwYn6MvuLDxwXG5JVAgMBAAGjggGMMIIBiDAfBgNVHSMEGDAWgBQtHhjw MKdWtGqVa9N4bY1741GiwDCBswYDVR0gBIGrMIGoMIGlBgkqhkiG9w0FBgEwgZcw TAYIKwYBBQUHAgEWQGh0dHA6Ly9wa2kubmFpLmNvbS9wa2kvTmV0d29ya19Bc3Nv Y2lhdGVzX1B1YmxpY19DQV9DUFNfdjEuMS5wZGYwRwYIKwYBBQUHAgIwOzAZFhJO ZXR3b3JrIEFzc29jaWF0ZXMwAwIBARoeQ1BTIGluY29ycG9yYXRlZCBieSByZWZl cmVuY2UuMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9wa2kubmFpLmNvbS9wa2kv TkFJIFNTTCBDQSB2MS5jcmwwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDgYDVR0PAQH/ BAQDAgOoMBEGCWCGSAGG+EIBAQQEAwIGwDAdBgNVHREEFjAUghJ3d3cuc2hvcG1j YWZlZS5jb20wHQYDVR0OBBYEFENcZ9sRfnD2vlhWW6KUNtDoO1IrMA0GCSqGSIb3 DQEBBQUAA4IBAQB8qB2LxFv2I7AwWxbuATzBmOKemuRrLNIgTqvk8o5TpjsOGcxA T5ZtCqkGz8FWy7n+Ck30eo+aDAiY5IamsCAUSRRspUWEn92CI96trdAGL7CQ1mF2 UIDzXUoHDt/58V4XU64xL6JNddEqYft14uKdPcuwRQDCz8+ptnm+oJKbOhbGod9A FfOovtYpyrRlnkpce1ZkKpazkjxNX4E9eVJ029U6qY7gF7donPwH1tSc9kQfZbUy 5SbVAjxgiSKrlhGZmpOI0o+A9BlXypOjpJLmnUi+VNk/tjT4mb5owqYvQv6Dh3Tx Z2h1sEBzBCP3/UjLssbad270iWx/DpIh7ToX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYzJK4D0WUgG+RFAKwRAILTijh fVf94hVgSsBxwhja0MhGlv3iMsMa9ALkgElHQhDIz5c2Q8+W7vDhDdN4vvUz6tOt lTmfpfuxfkb/hk5dIW9oWNOzZDWPfLNNYHreNLKpdPlX8cikcvNs4ld/rom9QERu GcGJ+jL7iw8cFxuSVQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284082694610972341613703943998223096162 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Associates' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NAI Certificate Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NAI SSL CA v1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2005-04-18 19:21:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 09:26:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Associates' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shopmcafee.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 152241515015556394270432513303914793746154421176092480897972317935648048796335552116319904779361223712711808769484109076813385222702706835349700914529609723645345136630821204984787867389127908189607293714879848763939454953315320915547139538972254629526263501564301846211396351158539227621067908148906830828117 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2d1e18f030a756b46a956bd3786d8d7be351a2c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.5.6.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki.nai.com/pki/Network_Associates_Public_CA_CPS_v1.1.pdf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Network Associates' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [67 80 83 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.nai.com/pki/NAI SSL CA v1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 03a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmcafee.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 435c67db117e70f6be58565ba29436d0e83b522b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007ca81d8bc45bf623b0305b16ee013cc198e29e9ae46b2cd2204eabe4f28e53a63b0e19cc404f966d0aa906cfc156cbb9fe0a4df47a8f9a0c0898e486a6b0201449146ca545849fdd8223deadadd0062fb090d661765080f35d4a070edff9f15e1753ae312fa24d75d12a61fb75e2e29d3dcbb04500c2cfcfa9b679bea0929b3a16c6a1df4015f3a8bed629cab4659e4a5c7b56642a96b3923c4d5f813d795274dbd53aa98ee017b7689cfc07d6d49cf6441f65b532e526d5023c608922ab9611999a9388d28f80f41957ca93a3a492e69d48be54d93fb634f899be68c2a62f42fe838774f1676875b040730423f7fd48cbb2c6da776ef4896c7f0e9221ed3a17