zanderbaldwin.com

Issued by Gandi Standard SSL CA

About this certificate


This digital certificate with serial number 21:86:d6:a3:1f:5f:ad:68:d9:26:a8:bc:7d:e9:e5:01 was issued on by GANDI SAS .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

zanderbaldwin.com

Organization unit: Domain Control Validated
Organization unit: Gandi Standard SSL

GANDI SAS

Organization: GANDI SAS

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 21:86:d6:a3:1f:5f:ad:68:d9:26:a8:bc:7d:e9:e5:01
Serial Number (int): 44564644999501264151441858456151778561
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 16:06:bd:5e:2a:2f:16:71:41:85:a7:d8:02:a1:5a:c0:b0:72:2c:b1
AuthorityKeyId: b6:a8:ff:a2:a8:2f:d0:a6:cd:4b:b1:68:f3:e7:50:10:31:a7:79:21

Fingerprint (sha1): 43:81:cd:7f:ee:cf:94:95:f8:6d:f3:8f:7c:cb:78:8b:8b:fc:8f:76
Fingerprint (sha256): 53:9b:4e:66:9b:e3:e9:b7:e0:0a:38:73:da:f9:36:3b:38:b2:74:a1:19:9a:e1:1d:d2:07:4b:05:8d:1c:ac:61

Issuing Certificate URL: http://crt.gandi.net/GandiStandardSSLCA.crt

Revocation information

OCSP Server: http://ocsp.gandi.net
CRL Distribution Point: http://crl.gandi.net/GandiStandardSSLCA.crl

Check the revocation status for the current certificate on zanderbaldwin.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

zanderbaldwin.com
www.zanderbaldwin.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIQIYbWox9frWjZJqi8fenlATANBgkqhkiG9w0BAQUFADBB MQswCQYDVQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5k aSBTdGFuZGFyZCBTU0wgQ0EwHhcNMTQwOTI0MDAwMDAwWhcNMTUwOTI0MjM1OTU5 WjBcMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsT EkdhbmRpIFN0YW5kYXJkIFNTTDEaMBgGA1UEAxMRemFuZGVyYmFsZHdpbi5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDW5XgtpOL+1ZkVaBC5jVt/ TuGTo2clpOikpSRpM7mPWTnsebjVCwNx/G9nLCweTgj5JfEVXbccgvRxavjcGHr5 V3/DjfifCmDf0oENMLVVSHfTQHzGIr9RvzlvTnlvPEDueKsfv9CsiTdd04LVE6+H kY8zfj0NCEBbpEodddsphaHlH+lWizI7Qva8In9UEy16sI95rTUJIVkTQ7YMhIrj DQtFHU7YZYj5/ZW1twhtlBCejJKhpl7AU0LWz7/fuhS52hBZG2nd3epxwtuDPHQ4 g/ocb3Au5jBrLqbTsEabh12Av+wyCg066wsMqSyWltmeOaY8cd+LjCKfgEWSeYTM Rhw3od0b7ibRaqC+Jjz8AJHG+TJUdscfVl9CiYAuZlMdTegKs9FpLV1lDjrp+QyF wqBmdNE7dhRxzcFHd2qGEmTj7VOnqBtZF9RIem+SPTO7/7BFzhLFzCjTtQ5oQcQo QQ7/d5RJPhnWA2cPtWuA99b/aAEC/E3CNBKp4eGrQ2a4hsnXqNRidGC/wRVRYpxC zQL51E6obXFqPyflhYTGTB6SQ1r+Sb42J/rqs7RSaaWSPe4DwJDbWWCvOV3RfNNl 4zqQ7UzQPNgzwjV9W21Koj5g4Pk4dMl9brQyVGNSAO2iJ3bVhHDCCAjgjEVvrtBb PSX7sJwrSwJBsbXUOE+ZWwIDAQABo4IBwjCCAb4wHwYDVR0jBBgwFoAUtqj/oqgv 0KbNS7Fo8+dQEDGneSEwHQYDVR0OBBYEFBYGvV4qLxZxQYWn2AKhWsCwciyxMA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjBgBgNVHSAEWTBXMEsGCysGAQQBsjEBAgIaMDwwOgYIKwYBBQUH AgEWLmh0dHA6Ly93d3cuZ2FuZGkubmV0L2NvbnRyYWN0cy9mci9zc2wvY3BzL3Bk Zi8wCAYGZ4EMAQIBMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuZ2FuZGku bmV0L0dhbmRpU3RhbmRhcmRTU0xDQS5jcmwwagYIKwYBBQUHAQEEXjBcMDcGCCsG AQUFBzAChitodHRwOi8vY3J0LmdhbmRpLm5ldC9HYW5kaVN0YW5kYXJkU1NMQ0Eu Y3J0MCEGCCsGAQUFBzABhhVodHRwOi8vb2NzcC5nYW5kaS5uZXQwMwYDVR0RBCww KoIRemFuZGVyYmFsZHdpbi5jb22CFXd3dy56YW5kZXJiYWxkd2luLmNvbTANBgkq hkiG9w0BAQUFAAOCAQEARe+R062OgjGPz1BVOFp86jj7jaHR6eCqR13X8OkifEMH J9oZIGuv84GvTLHgN45v9o7pHqUnpSngXeNn6pSKcGMjH4W2nn2KQPkC8/MZvVjh KujWixmvPQe0Xo3L+jjK8M2geIVCNgSJgI5+r8wWced2GPk23bcqC2PwvE+m36th E6hP9OiZBdklTlIDsa0Moj02X6Rbi5u/9eCXFa7nnHJxR+n1Cq0rdzM8CtFShtyt oqHre38htNO9XBwyLq3QCfcwFHE/e0GmHgjDX3KNJIugPvixujYXtIPApvfnYOnU Wfqiba5IW1gh4yX1ilPZ8E9FKVZJ9+fl0iP2oHzQ2w== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1uV4LaTi/tWZFWgQuY1b f07hk6NnJaTopKUkaTO5j1k57Hm41QsDcfxvZywsHk4I+SXxFV23HIL0cWr43Bh6 +Vd/w434nwpg39KBDTC1VUh300B8xiK/Ub85b055bzxA7nirH7/QrIk3XdOC1ROv h5GPM349DQhAW6RKHXXbKYWh5R/pVosyO0L2vCJ/VBMterCPea01CSFZE0O2DISK 4w0LRR1O2GWI+f2VtbcIbZQQnoySoaZewFNC1s+/37oUudoQWRtp3d3qccLbgzx0 OIP6HG9wLuYway6m07BGm4ddgL/sMgoNOusLDKkslpbZnjmmPHHfi4win4BFknmE zEYcN6HdG+4m0WqgviY8/ACRxvkyVHbHH1ZfQomALmZTHU3oCrPRaS1dZQ466fkM hcKgZnTRO3YUcc3BR3dqhhJk4+1Tp6gbWRfUSHpvkj0zu/+wRc4Sxcwo07UOaEHE KEEO/3eUST4Z1gNnD7VrgPfW/2gBAvxNwjQSqeHhq0NmuIbJ16jUYnRgv8EVUWKc Qs0C+dROqG1xaj8n5YWExkwekkNa/km+Nif66rO0Ummlkj3uA8CQ21lgrzld0XzT ZeM6kO1M0DzYM8I1fVttSqI+YOD5OHTJfW60MlRjUgDtoid21YRwwggI4IxFb67Q Wz0l+7CcK0sCQbG11DhPmVsCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 44564644999501264151441858456151778561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GANDI SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zanderbaldwin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876700680814500775922688871394203023701526286530822302622347801168346365752157240886902340978011934607404083720301773070295891583838116010045336709500500635818563789915494839674828687881407330423588409067279512483589897283901364768897451433596238353256868765180448755815331851352728474524121359670569388112171232563666840008631762956269573165231450537875844938896937721675275029302740434109815361790415769266006960531382130713444868492795725355131422198452872167031594544366906705629197147519715029444414624220719053680434978015076708713547112011938023929470030114745978853939656866326554682829536268316791491963453003049618371904787646119965474986494259984024949888957438103529272981365924244809974656169713021473814961417749478887824593451562741529357845172435081687850299048879082625526004853775143841995504833681729584439957259906063703862962879299817405084652652605248338970667792644524154873662185624344277772879300459363470000795679266483544187327083472130188429996713508206591288036749528434205468970351020107541955757294932886107091654482346998315992284767090980790424240760150204152692573761176753797092628424336319320003851485813669974032774282554794483257875267140524793463381933013960754175787261420167389149500445530459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b6a8ffa2a82fd0a6cd4bb168f3e7501031a77921 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1606bd5e2a2f16714185a7d802a15ac0b0722cb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.gandi.net/contracts/fr/ssl/cps/pdf/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.gandi.net/GandiStandardSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.gandi.net/GandiStandardSSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.gandi.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanderbaldwin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zanderbaldwin.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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