gbc.fi

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 1f:c9:da:21:8e:37:a7:fe:71:51:85:21:dd:71:69:3c was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=gbc.fi

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:c9:da:21:8e:37:a7:fe:71:51:85:21:dd:71:69:3c
Serial Number (int): 42254143761735007091779102014994213180
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 95:e9:bb:f6:d1:5c:ae:f6:39:48:d2:24:00:a8:a1:fe:c1:bb:ad:9f
Fingerprint (sha256): b6:b0:7b:7e:2f:13:51:2c:a2:0a:0d:2f:9c:2f:18:6b:aa:e0:da:28:7e:32:cb:af:8e:f7:b6:a5:94:97:50:3a

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate gbc.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gbc.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gbc.fi
www.gbc.fi

Other certificates including the domain name gbc.fi

(limited to 100 certificates)
fs2.gbc.fi
gbc.fi
*.gbc.fi
git.gbc.fi
portal.gbc.fi
proxy.gbc.fi
gbc.fi
gbc.fi
gbc.fi
proxy.gbc.fi
gbc.fi
fs1.gbc.fi
git.gbc.fi
gbc.fi
puhelut.fi
gbc.fi
puhelut.fi
proxy.gbc.fi
puhelut.fi
fs2.gbc.fi
puhelut.fi
gbc.fi
extra.gbc.fi
gbc.fi
puhelut.fi
fax.gbc.fi
fs2.gbc.fi
portal.gbc.fi
fs1.gbc.fi
proxy.gbc.fi
gbc.fi
git.gbc.fi
extra.gbc.fi
extra.gbc.fi
fax.gbc.fi
*.gbc.fi
git.gbc.fi
git.gbc.fi
proxy.gbc.fi
portal.gbc.fi
proxy.gbc.fi
puhelut.fi
puhelut.fi
gbc.fi
fs2.gbc.fi
puhelut.fi
gbc.fi
puhelut.fi
proxy.gbc.fi
git.gbc.fi
puhelut.fi
puhelut.fi
gbc.fi
git.gbc.fi
*.gbc.fi
extra.gbc.fi
puhelut.fi
mail.gbc.fi
msg.gbc.fi
gbc.fi
gbc.fi

Certificate

The complete raw certificate details for gbc.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42254143761735007091779102014994213180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gbc.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930067550472240169348692613564311801196626176918023054728128644656302490648944736003173580209091976940492489109005960969340927295349620132202764752690363017776653196347480150375367999371720296695468843792732673995630144461547462938768965341097392686954409979459346540931220361571166855731106439869060650412297220675304861099203519002106227476112672557737838544532453522397877243165785574372094475611364688407325275630056899733125990448321912222142300685513682609619170502159107146295285550707415448204212271289549243059321630614911771026766259305318976102671775280361938443385784212080573536003893524444359311498658519038597084936835249149071921001376342134233821504885618114660183370981924003863051562806012934249903456443724788466880724999425594918096031206981346110968003441884143892956382990620062054824382689409414094998946365476329378719039469710532679476003175692364669900914157963692810214621531773477040426424421790627880051909119233962213995322570753233704176915436531022457679886292766273836391493571249896664286495001050243145708223559580603737121600718277637074376596465267514410386808078328145405918653099337337319789400256379132256777733924532814943691700816372105346663865712572241159514872000630843584304298619005761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbc.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015926d9c2bc000004030047304502202088d6211b68343c2e94746740e510fd2b04ee83ba5d861b027d84ac89377e4a022100db229ee72ea6ed767b3de16777b34eee5d36b5b33227f9481ac39a0193253646007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015926d9c2fa00000403004730450220384cef0aafeb8a742eee036708363935aa83adda50aee444e7b9cca25b0a4a4d022100d4fffb82fb28e310295524573caeadd9afd222ecba96c8dd317be9c2d84cc0de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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