secured1.aubretia.net

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 50:2b:c6:e4:17:01:a6:9a:6e:0d:c5:59:34:07:c5:36 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=secured1.aubretia.net

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:2b:c6:e4:17:01:a6:9a:6e:0d:c5:59:34:07:c5:36
Serial Number (int): 106565542415952994616619795476365428022
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): cd:dc:e3:dc:58:e7:6e:01:1c:3a:a5:94:09:92:90:a3:01:0b:1f:92
Fingerprint (sha256): a9:2a:3e:64:0c:75:a1:53:8f:db:57:7f:8e:43:b1:92:e7:38:69:de:b7:e1:93:86:a5:f3:97:00:4d:0a:9f:70

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate secured1.aubretia.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secured1.aubretia.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secured1.aubretia.net

Other certificates including the domain name aubretia.net

(limited to 100 certificates)
secured1.aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
secured.aubretia.net
aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
londis.aubretia.net
aubretia.net
rmtonsite.aubretia.net
aubretia.net
aubretia.net
londis.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
aubretia.net
rmtonsite.aubretia.net
aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
aubretia.net
londis.aubretia.net
londis.aubretia.net
londis.aubretia.net
londis.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
aubretia.net
londis.aubretia.net
aubretia.net
*.aubretia.net
mail.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
aubretia.net
rmtonsite.aubretia.net
www.aubretia.net
londis.aubretia.net
aubretia.net
aubretia.net
londis.aubretia.net
aubretia.net
rmtonsite.aubretia.net
aubretia.net
aubretia.net
londis.aubretia.net
londis.aubretia.net
secured1.aubretia.net
aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
londis.aubretia.net
secured1.aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
secured1.aubretia.net
secured.aubretia.net
aubretia.net
aubretia.net
londis.aubretia.net
aubretia.net
aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
londis.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
aubretia.net
londis.aubretia.net
aubretia.net
londis.aubretia.net
londis.aubretia.net
secured1.aubretia.net
aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
aubretia.net
londis.aubretia.net
aubretia.net
www.aubretia.net
londis.aubretia.net
rmtonsite.aubretia.net
rmtonsite.aubretia.net
aubretia.net

Certificate

The complete raw certificate details for secured1.aubretia.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPdr8im2pF9CVD+DRBNV
5Ab4G63uD1SIrk/r+QnYXyP+wT2SAA6mcFo90N7rXGLuUIrln6tKJ4CjuPbmsHMY
f/K8+EebML5GYLBXBTfo43XIN0+sus5p+2zo860PVqMpgaGgK4ZJTwyp5/Nt8xy2
VeTVjwUdgz8Uop+29Il1kMr0EVthZNyq6nSUcHp3b8o2gybV2gzPm0zk6b0hHYfH
RbY+BZwDFlp1VV1q70t9LHytRANlbujKhAUuyVEZeAxmo/OqBKXiTmw2Pq6zG/PG
pQJ630vJ8u5mXlOAskfOfEevrMQTCgaw5aqKBQQ9yr4xgELR1Fzdfg7aa47DWu0Z
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106565542415952994616619795476365428022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secured1.aubretia.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25369669162969462349795392388550108069383125524907444458028217244694653384596678301922417664291943494442323383128422060903515008133781458005803300575425562168976903175716827169542534489095247850975317731935700834079873912917540997226784807186470338149107837941746187957421078592534535055105870077567224246304920532992546560039645238749957820878701050448936614026696056013394174186169527051493315285784642917447208726816862194708688549752610596421484764413928679554178657483893820311549903410741109939594524788298399098098086169945258056002720336469497644625293180950194711716167147321794406786146534045567294316026129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured1.aubretia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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