amcstore.outdoors.org

- Appalachian Mountain Club -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 3f:ae:02:1e:c3:40:13:4c:7a:4a:90:59:06:94:12:95 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Appalachian Mountain Club

Organization: Appalachian Mountain Club
Organization unit: Web Operations
State / Province: Massachusetts
Locality: Boston
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:ae:02:1e:c3:40:13:4c:7a:4a:90:59:06:94:12:95
Serial Number (int): 84644866389925882034920489986406224533
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 84:eb:6e:e2:d5:28:c4:6e:e2:49:27:f7:37:9b:74:75:9a:9c:aa:30
Fingerprint (sha256): b6:2e:e4:50:b3:6c:3d:06:f7:95:c1:3b:b1:fa:aa:71:52:6e:ba:17:9e:12:c0:12:44:ba:40:8d:9d:14:af:f7

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate amcstore.outdoors.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amcstore.outdoors.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amcstore.outdoors.org

Other certificates including the domain name outdoors.org

(limited to 100 certificates)
image.e.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
*.outdoors.org
secure.outdoors.org
outdoors.org
bushwhack.outdoors.org
assets.qawww.outdoors.org
image.e.outdoors.org
devstore.outdoors.org
*.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
files.outdoors.org
image.e.outdoors.org
secure.outdoors.org
mail.outdoors.org
amcstore.outdoors.org
*.outdoors.org
amcstore.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
*.outdoors.org
www.outdoors.org
amcstore.outdoors.org
files.outdoors.org
signup.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
*.outdoors.org
image.e.outdoors.org
mail.outdoors.org
outdoors.org
yop.outdoors.org
signup.outdoors.org
frodo.outdoors.org
signup.outdoors.org
bushwhack.outdoors.org
amcstore.outdoors.org
image.e.outdoors.org
amcstore.outdoors.org
files.outdoors.org
secure.outdoors.org
san-2-s7.tlsprovisioning.exacttarget.com
amcstore.outdoors.org
secure.outdoors.org
yop.outdoors.org
signup.outdoors.org
image.e.outdoors.org
amcstore.outdoors.org
*.outdoors.org
*.outdoors.org
summit.outdoors.org
image.e.outdoors.org
devstore.outdoors.org
image.e.outdoors.org
secure.outdoors.org
image.e.outdoors.org
bushwhack.outdoors.org
peregrine.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
image.e.outdoors.org
san-2-s7.tlsprovisioning.exacttarget.com
amcstore.outdoors.org
amcstore.outdoors.org
amcstore.outdoors.org
image.e.outdoors.org
san-2-s7.tlsprovisioning.exacttarget.com
image.e.outdoors.org
www.outdoors.org
signup.outdoors.org
image.e.outdoors.org
devstore.outdoors.org
san-2-s7.tlsprovisioning.exacttarget.com
amcstore.outdoors.org
www.outdoors.org
image.e.outdoors.org
outdoors.org
amcstore.outdoors.org
image.e.outdoors.org
www.outdoors.org
image.e.outdoors.org
san-2-s7.tlsprovisioning.exacttarget.com
summit.outdoors.org
www.outdoors.org
secure.outdoors.org
outdoors.org
amcstore.outdoors.org
image.e.outdoors.org
outdoors.org
amcstore.outdoors.org
outdoors.org
image.e.outdoors.org
image.e.outdoors.org
summit.outdoors.org
image.e.outdoors.org
outdoors.org
image.e.outdoors.org

Certificate

The complete raw certificate details for amcstore.outdoors.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyBZWYvkJBWhi1Jzkn6T
DJOh/w1xsnNaB3RdbV9sim5LLdefVPnhJ0Jj1LRrYsiDFuvIxoP/eyKJfz9U4m5b
z+6xubZp5cxcRbuSkRD/I5/C2k/I7eDB6BvLZXmqARaaWmS8+qRfAZFZ2LjAdq19
XofotNNKUE5pky3lrbgzYdvyA6IhZocb+h63eoyZEPRfBPDb12IGU6HsMOq5dray
pMuj+Uv3o08dVl/q5WLIwV3BVz6/TyLDzD109TInXeJhG2E49lNE9dwevYb2tnfL
L8kUF22RAjeUUb6sXsT2L3q61e+EOvcs10RfOHC1AWq42tcKoheTwV+nPDxmtfkf
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84644866389925882034920489986406224533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Appalachian Mountain Club'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Web Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'amcstore.outdoors.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19077935947464331537098577566664445188704158830827474477744396781006857543167853905795282426436351565292137676056890517809118092366856448114695631656362557229367821412125063843658724044833087535293691197638993584639484515529889112676027680018677723352385737426115396239843394406176487730760538334900803716382523132063697589758292923841827833119870635214141625614505528179317770319651099222446240700122727258416316296368925704987400141538291437769271364402791544598796249761091804505917003008351318479828269629277944989890274824255592285641418182934248124895494043492292868782506275715851783514681760407837969525317423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcstore.outdoors.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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