*.aemedia.us
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 72:81:e4:39:8f:4c:ab:98:8e:97:f4:cd:ec:c4:4d:8b was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.aemedia.us
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 72:81:e4:39:8f:4c:ab:98:8e:97:f4:cd:ec:c4:4d:8bSerial Number (int): 152206426763975343274630018501978639755
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): ee:f2:ea:da:bc:f8:48:e4:9e:fc:0c:34:2b:fe:f4:46:14:6d:98:17
Fingerprint (sha256): b8:3f:67:d2:b6:e1:5c:53:15:01:b6:44:21:9a:a8:3f:0d:4b:95:ec:0d:45:eb:40:ac:82:98:91:63:e6:ca:6a
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate *.aemedia.us
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.aemedia.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aemedia.us
aemedia.us
aemedia.us
Other certificates including the domain name aemedia.us
(limited to 100 certificates)
mail.aemedia.us
mail.aemedia.us
as.bos2ssl1.aemedia.us
*.aemedia.us
*.aemedia.us
mail.aemedia.us
*.aemedia.us
*.aemedia.us
*.aemedia.us
sfo1image.aemedia.us
mail.aemedia.us
po.aemedia.us
as.sfo1ssl1.aemedia.us
nyc1image.aemedia.us
*.aemedia.us
as.vpn.aemedia.us
as.bos4ssl1.aemedia.us
as.vpn.aemedia.us
vpn.aemedia.us
mail.aemedia.us
as.bos2ssl1.aemedia.us
*.aemedia.us
*.aemedia.us
mail.aemedia.us
*.aemedia.us
*.aemedia.us
*.aemedia.us
sfo1image.aemedia.us
mail.aemedia.us
po.aemedia.us
as.sfo1ssl1.aemedia.us
nyc1image.aemedia.us
*.aemedia.us
as.vpn.aemedia.us
as.bos4ssl1.aemedia.us
as.vpn.aemedia.us
vpn.aemedia.us
Certificate
The complete raw certificate details for *.aemedia.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIQcoHkOY9Mq5iOl/TN7MRNizANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE2MTEzMDAwMDAwMFoXDTE4MTIzMDIzNTk1 OVowFzEVMBMGA1UEAwwMKi5hZW1lZGlhLnVzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwISFtS3Y2ldxeicIcL+0s3Dlg7YInsMeuWG/7QZuiN/vdmb8 tpnQDSYlhpQosJ4yeQnauIZSTIUHR/ZQhwYJnjOpXhaJ5oOZs6Nv0vr+0vzznotu KMkR5f8RdHOw/bnUvrgcg0fQu+DU+HnuqARpVAvtlPeUwJCOiSP48NG34rABdXgb LhZN4k6Z/+iJlsaFxU79h5DwkC2C5gtMAjzrVWP3UyZTc4Mtp2E5Cz5+G64XdciA /cRnuCYQmATmAkhuPGYkWSi9AxkuMOgaAesqskupXqyGuk5mth2+/k62kNfb3epT TJiZofVshweszjNfu7VCT6D7rxCK0DQWgqTzuwIDAQABo4IC/TCCAvkwIwYDVR0R BBwwGoIMKi5hZW1lZGlhLnVzggphZW1lZGlhLnVzMAkGA1UdEwQCMAAwKwYDVR0f BCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0gBGgw ZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wu Y29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNv bS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUF BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggrBgEF BQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggF+BgorBgEEAdZ5AgQC BIIBbgSCAWoBaAB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAAB WLTS9ZEAAAQDAEgwRgIhALAnbw2ti46PSjuK3zlZVNw35jsr+bAF/iD30mQ/9tQb AiEAnBHDdy/lhj5nKMmOOZCNvF2fecEw0+0+2KZ1ggoDelwAdQDuS723dc5guuFC aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVi00vXYAAAEAwBGMEQCIHzJqMplWMNs J71rX1BNvVIxpuGVVlR01aEXESuB/KhEAiB4SinNEejTKaJemnlsAu2ga4kcwljZ 4Ssi5U2t0BpuhgB2ALx44d/F9jxoRkkzTaEPoV8JeWkgCcCBtPP2kX8+2bilAAAB WLTS9oEAAAQDAEcwRQIgIuRvxQpAdzRBlV/QDf52dIK1pYUbwE1Bud5irpLezMcC IQDYTc6G6hl9p0Jkf047nn33hCSjGPveAx6dLcIJ9Hu5KDANBgkqhkiG9w0BAQsF AAOCAQEANMDT9dLndBcE5Xi7MANtBuNbA33EIHlTSQy5rHk31JccEGH0DKAgPVI2 1tyzuDMMMiPiX4+cRJzf9JcWdoflri96DyizxqsRJMQnX5v31c4rC8ZqCoLVODjj BovuCACDQ0ps3JDltVr2loKFN80nxE008FODUDD1OPlciuR7H491KkhVXnoE1wnt TYc3YbAbUXO3iP2j309c326Ou5h98UhxHyqvzOBqrLYMtc0Wu9Q2mJ/0yWS2zmyD 2kDZWjk/MDRNgHrqE+E9KHuH7qTpR5gjdtEcWq6FsT+ifcG7XH7yBCsbr1btC8YQ 9YqP3Od1JycoyPHbt8nF6OzPBS/3sw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwISFtS3Y2ldxeicIcL+0 s3Dlg7YInsMeuWG/7QZuiN/vdmb8tpnQDSYlhpQosJ4yeQnauIZSTIUHR/ZQhwYJ njOpXhaJ5oOZs6Nv0vr+0vzznotuKMkR5f8RdHOw/bnUvrgcg0fQu+DU+HnuqARp VAvtlPeUwJCOiSP48NG34rABdXgbLhZN4k6Z/+iJlsaFxU79h5DwkC2C5gtMAjzr VWP3UyZTc4Mtp2E5Cz5+G64XdciA/cRnuCYQmATmAkhuPGYkWSi9AxkuMOgaAesq skupXqyGuk5mth2+/k62kNfb3epTTJiZofVshweszjNfu7VCT6D7rxCK0DQWgqTz uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 152206426763975343274630018501978639755 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aemedia.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24303103733151113560167764643146184788164833378612571668296557218970221513317513859224163521146734330623533661456152274913995918014871505501514687598547020636114627925461946795116012388805847662746023009027671426567673632378560457693049807899809864070934051273401285997533076010138805736470127011654068587476809385756919212957615458797206386386596269720619221250333874184136096472800313141370324163750922039519738974545539376424915654420676462076912809906013158084332335694461837617277069124895765444908613150073545767505936127282880008416329933940518016418680250260006358938001654824647245166247919143801031087158203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aemedia.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemedia.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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