ascm.me

Issued by Gandi Standard SSL CA 2

About this certificate


This digital certificate with serial number 6e:9e:15:f2:4d:d9:c3:0c:66:79:0a:92:97:42:0e:41 was issued on by Gandi .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

ascm.me

Organization unit: Domain Control Validated
Organization unit: Gandi Standard SSL

Gandi

Organization: Gandi

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:9e:15:f2:4d:d9:c3:0c:66:79:0a:92:97:42:0e:41
Serial Number (int): 147035907567899857671084173557588168257
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:0b:a9:6a:62:40:c8:90:3a:c9:1f:68:04:53:54:0e:bc:1d:c1:8d
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): d3:b7:31:bf:82:59:66:10:44:8d:71:6f:32:02:8a:21:73:f8:70:42
Fingerprint (sha256): 44:4c:6c:ea:0c:d8:6f:5f:08:ff:b9:26:b0:41:83:11:56:07:6f:a0:f1:36:36:fa:3a:1a:22:51:01:b5:c8:f6

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for the current certificate on ascm.me
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

ascm.me
www.ascm.me

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIQbp4V8k3ZwwxmeQqSl0IOQTANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw HhcNMTQxMjA4MDAwMDAwWhcNMTUxMjA4MjM1OTU5WjBSMSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT TDEQMA4GA1UEAxMHYXNjbS5tZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAJ5t0vPX9kWKXGFXKd4op5xFTz4AXLNwF63CG7llXUQ6r4y9piZl+ZJ0GmeW SaenMWU4b4PZaMES4YcVQ+vpHRBifzyjK/W6kyJEqQdX7VRqAP7OAKKgSDGHSp9l b+iaKems4iFHUSerOLW46B+Hreg9gpSMs0SeAcSMGNC7Mftrc+bJTjGUAUnS1nRe qMVR53z6KVcOTvlLeGmvY3n2hoWesZb7ODHMT+W2n0TJjZarX6+1Vydx7cg8QOEq Z8T2389yA0jAjyVpgCzZM1x3otuEjqvSu4AWZPjf/y2miyvKrASbGP8ANkMcvk2a nAKyvtqVCSb5gMt2PQg4j98saiT1Efv+d+XGqxpN3YzdBizE1EnoOnwqXVVeW5+9 Fc7w0ueNWyDQLWTYq8sdnVWKI2pjQMc6Y9u1AvYLAp8eOWOlTQWbJmj4tC5R3DAe VBYdS25MuXNeaUA8TQPRWYEHuEHoGsWtZhgkTbHWiv9uIHpFD0ExeBpej2xEJ5Fu VhAC6b8naQvaeOOI74T5a0OqmG1VCKU+js1UEEPMO1roQLhRCJqEZqgKPamopxGX Ei08F3iZENXSWNh4zmCCGGv8rZMiReQnzVxwyJ0Q36J6kJNlqrbpcD19JCjYtmFX p7ks8mFPBHWWiWFPpVVkoOPMwrYvq7bje3MJlrWPCo9rYjyJAgMBAAGjggGnMIIB ozAfBgNVHSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUhgup amJAyJA6yR9oBFNUDrwdwY0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYB BAGyMQECAhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNv bTAIBgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1 c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8 BggrBgEFBQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRh cmRTU0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu Y29tMB8GA1UdEQQYMBaCB2FzY20ubWWCC3d3dy5hc2NtLm1lMA0GCSqGSIb3DQEB CwUAA4IBAQAbmaasouRQahr5uJNRb8MLHT91jqnu1sPpx+de6CiS9U4m7uQwfL9S hi6MCRDziUqei+TECh0NW3gA+slz/soK9yD0FRMRNJ4bvNGsS9BsIT6NAwsiytCB tqha7MvgvHFLEmYWUFqNS/ORjmH7GtLBsYiWWGzjI/go6gSY6w9E+lWqtgCBY0Xt QKmNA12cOcmb58OrL03Bt5hXw/LrvrMo3gwCiG9bogMxMMzsdDnYtTY92qe6+4N0 BuLsLNmHS208Zq2KoXSa12+B1i4uisjbN3kTUg6yz7m1+AiKivAb8zEZFoJcYy4r 9NByoga8Nmr3GzkrQ++YdeDe+Ebpilrr -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnm3S89f2RYpcYVcp3iin nEVPPgBcs3AXrcIbuWVdRDqvjL2mJmX5knQaZ5ZJp6cxZThvg9lowRLhhxVD6+kd EGJ/PKMr9bqTIkSpB1ftVGoA/s4AoqBIMYdKn2Vv6Jop6aziIUdRJ6s4tbjoH4et 6D2ClIyzRJ4BxIwY0Lsx+2tz5slOMZQBSdLWdF6oxVHnfPopVw5O+Ut4aa9jefaG hZ6xlvs4McxP5bafRMmNlqtfr7VXJ3HtyDxA4SpnxPbfz3IDSMCPJWmALNkzXHei 24SOq9K7gBZk+N//LaaLK8qsBJsY/wA2Qxy+TZqcArK+2pUJJvmAy3Y9CDiP3yxq JPUR+/535carGk3djN0GLMTUSeg6fCpdVV5bn70VzvDS541bINAtZNiryx2dVYoj amNAxzpj27UC9gsCnx45Y6VNBZsmaPi0LlHcMB5UFh1Lbky5c15pQDxNA9FZgQe4 Qegaxa1mGCRNsdaK/24gekUPQTF4Gl6PbEQnkW5WEALpvydpC9p444jvhPlrQ6qY bVUIpT6OzVQQQ8w7WuhAuFEImoRmqAo9qainEZcSLTwXeJkQ1dJY2HjOYIIYa/yt kyJF5CfNXHDInRDfonqQk2WqtulwPX0kKNi2YVenuSzyYU8EdZaJYU+lVWSg48zC ti+rtuN7cwmWtY8Kj2tiPIkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147035907567899857671084173557588168257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ascm.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646333930582365112879525913751006638725881880876361487345605278403651681494946397530523654449741387351255849538112590271121092808049169282317127565788503848504967210771166925537940933744078909076154880042906050598569668458929659459084720896351179811754140142400264643396078819227195587315098106482254693862337439121265782613269046714196646620470546860953188905309244878912897040266694741010999485688366238671467048792321887301590109285326995522899104472699053926427345291919105008490906266623720166513352732750403524051719001140466925803817407944586837468332722264087714912632107298169158889501376074996404629590632734050547908377723748740295366201178889148290608038065539571326537272448629670251528460120502033010049530548372184196329160839271062519090038013062075161496192579003055200918953959182298353917971890339145708463588936860634573043648439616293195421941476110224572729465062075467182628830025765189284709627473150943279365326690783977736714449063225551346967814936616709841886332399870545652709122622773583417859513836179043714981558030255698143147661808122613729473049935293655664038016334375093775306303029206261124559452950745182573552166387655670161053994606938894909336564519450616836784713028248460276517155111058569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 860ba96a6240c8903ac91f680453540ebc1dc18d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascm.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascm.me' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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