*.metrixlab.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0c:12:d6 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=uV1NWsxbc-bElNg8h1HPYp8NvxkawDD9,CN=*.metrixlab.com,OU=GT29212224+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:12:d6
Serial Number (int): 791254
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 10:cd:6a:0c:bc:8b:79:0e:ea:59:32:c9:45:7e:e9:ca:55:6d:24:af
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): a0:10:5f:36:e8:92:2b:c7:5c:a4:c8:bb:05:16:c3:49:b3:77:38:75
Fingerprint (sha256): ae:3c:9e:68:94:d0:d1:53:23:60:0c:33:cc:bd:b4:c1:89:d2:60:df:2b:46:3c:1d:c3:74:37:ac:74:3d:49:97

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.metrixlab.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.metrixlab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.metrixlab.com
metrixlab.com

Other certificates including the domain name metrixlab.com

(limited to 100 certificates)
status.itsnationwide.com
*.metrixlab.com
status.site24x7.jp
*.metrixlab.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
*.metrixlab.com
webstatus.engr.ucdavis.edu
*.insights.metrixlab.com
status.interhyp.de
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
*.metrixlab.com
status.managementcouncil.org
*.report.metrixlab.com
status.qualyteam.com.br
*.report.metrixlab.com
status.logicpath.com
status.metrixlab.com
mail.metrixlab.com
webstatus.engr.ucdavis.edu
metrixlab.com
amccinema-ksa.status.vistamanaged.services
webstatus.engr.ucdavis.edu
*.metrixlab.com
*.metrixlab.com
status.itsnationwide.com
*.clftest.metrixlab.com
status.zoho.jp
*.metrixlab.com
*.report.metrixlab.com
status.blitzrocks.net
bacardi.metrixlab.com
webstatus.engr.ucdavis.edu
metrixlab.com
*.metrixlab.com
status.managementcouncil.org
*.metrixlab.com
streamlit.metrixlab.com
status.itsnationwide.com
status.zoho.jp
metrixlab.com
status.site24x7.jp
status.mscloud.ca
status-salus-na.uleeco.com
status.elmohub.com.au
status.site24x7.jp
*.metrixlab.com
*.metrixlab.com
webstatus.engr.ucdavis.edu
webmail.metrixlab.com
hybrid.metrixlab.com
*.metrixlab.com
metrixlab.com
*.report.metrixlab.com
status.mybookingplatform.com
*.report.metrixlab.com
metrixlab.com
webstatus.engr.ucdavis.edu
*.insights.metrixlab.com
status.mybookingplatform.com
status.mybookingplatform.com
status.hub.verifiedidentitysolutions.com
status.logicpath.com
*.metrixlab.com
*.metrixlab.com
status.managementcouncil.org
*.metrixlab.com
status.elmohub.com.au
*.metrixlab.com
webstatus.engr.ucdavis.edu
*.metrixlab.com
status.teamtexter.io
*.report.metrixlab.com
webstatus.engr.ucdavis.edu
*.metrixlab.com
*.metrixlab.com
webstatus.engr.ucdavis.edu
www.metrixlab.com
*.metrixlab.com
webstatus.engr.ucdavis.edu
status.hub.verifiedidentitysolutions.com
status.managementcouncil.org
*.metrixlab.com
status.blitzrocks.net
*.metrixlab.com
status.elmohub.com.au
*.metrixlab.com
status.qualyteam.com.br
*.insights.metrixlab.com
webmail.metrixlab.com
*.report.metrixlab.com
*.clftest.metrixlab.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.zohocloud.ca
*.metrixlab.com
maintenance.xempus.com
status.zoho.jp
*.metrixlab.com

Certificate

The complete raw certificate details for *.metrixlab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ilNpjZRqZJ6fLbpGhz
2TITqioImoMG1H88/mZHH/UchRGyjD4ONzIbES/smFLLAMSYPrBg94+kR1Mg2ls+
aYlGsBx44cZrtcF6ro6Cis0RKbUCC4GQKfZIKEuCCA4g0ebtzm3CZpJA9bmoJakD
WFtdPHy7vrTcF35nPqJUIQy4L29YIDPCllY51HYlExsjKMUjCo33Z4hECtQj84v0
LOFn1Vfmyro1Qh/66+K/PRtAa6umzczp2HEibYEc9PKhpGJC/1D5dFnxWmKdwJuC
3GYC4SO5WtCbGrKp0L1qb3BHrYEfNaEltjIZwF+0eBsfF+lTkTet+7qDI89u+mOw
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 791254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-13 18:09:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-16 18:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uV1NWsxbc-bElNg8h1HPYp8NvxkawDD9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT29212224'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.metrixlab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24723301279211188078337443017171420607772560354901190460276589745898921520047374349800672882733195997395756386896465221308060769802249235875489293561827561641183629520407670767820696342836488094437365898705878273038182490174564259081287641341656867687074734631487417964662159110633856537038071917600053762277071758388220174188758780269021487517288531984144629846497500189242845271110053529897126424864333982552747088406910109474460744565556601136709729813132247112644792361837939161592884396173474903043495894808105619929059051360332214985697036728675453182838356356601132362018944658297834508774284911628672705998901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrixlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrixlab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10cd6a0cbc8b790eea5932c9457ee9ca556d24af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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