www.jfallen.com

- John F. Allen & Son, Incorporated -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 31:06:22:53:a7:f5:8b:44:2a:70:b6:f4:e7:6f:4d:5f was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

John F. Allen & Son, Incorporated

Organization: John F. Allen & Son, Incorporated
State / Province: Rhode Island
Locality: Warwick
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:06:22:53:a7:f5:8b:44:2a:70:b6:f4:e7:6f:4d:5f
Serial Number (int): 65164021804456940711140235230135143775
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 71:ae:9e:fb:78:aa:20:da:8d:c6:ed:5b:89:7f:60:5c:34:ce:3f:bc
Fingerprint (sha256): b5:4b:d2:64:2c:95:51:c6:21:e2:4b:60:73:22:f6:31:67:77:a9:12:71:b6:b5:f9:61:ad:0f:bc:52:1d:b2:22

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.jfallen.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jfallen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jfallen.com
jfallen.com

Other certificates including the domain name jfallen.com

(limited to 100 certificates)
jfallen.com
jfallen.com
www.jfallen.com
jfallen.com
jfallen.com
www.jfallen.com
www.jfallen.com
www.jfallen.com
jfallen.com
jfallen.com
jfallen.com
jfallen.com
jfallen.com
www.jfallen.com
www.jfallen.com
www.jfallen.com
www.jfallen.com
www.jfallen.com
jfallen.com
www.jfallen.com

Certificate

The complete raw certificate details for www.jfallen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65164021804456940711140235230135143775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Warwick'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'John F. Allen & Son, Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.jfallen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889405732693329090834860266553991726490413827728743650945176878947356323627478622030493234277323451473376522333388277814991740283557244427887271483752892983915390587330545995200526099265461963165276110265951145795025948540336098928767470602411886778650127527667451330964994298542495960341015408069971529070140712538917453192189976712448342755275388003307697085776651849945783814354348433393784257338587193368940435107170970463851384407873353422822917890945532338208728410243546913205313910185167674686036995490368493844340218360674910633014205232268278879590083090807543931211324723412519211282701721574832304759653587070539446476867326791332309217577855887172544156186981282957326377659016532954821128828246873733139605376984343178737118350047599336369157923869024348061556704317545912993135464713201764197234992787667868591003719310770649472275124980132346029302235940809952439557652600418611461999890354637931453084526152258846109806675717311236113969249386172408186101296397942876065298602063482963850700397695518901829502922364190472875223871595736452316008570755971205378894684942525938033111071038423958942213306846800601420115355648338009031679053001360424494584638398226115385704718872342075273567529244392139201175848408101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jfallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfallen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f5e5d7a9a0000040300483046022100e9f401a583bd5a9d347045dc6079b15651ab1adab70b6962ab6de5afd3b3438b0221008fd22445db5f9a3654b820bcaf632dd36396211be39c0a101595c320276c70fd007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f5e5d7ac900000403004730450220145bd7a3910e27232c6dc6bac8f45963856597ee38ee0589f4c6e8acf6c03e78022100db04365968a7fc44671548964cdeb1e079e7f5e0ba1ef34d095c8c22120ac8cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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