paygate.netfield-media.net

- Netfield Media S.L. -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 56:2f:b9:69:cd:6f:7b:67:94:fb:fd:e1:19:27:7d:f6 was issued on by GeoTrust Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Netfield Media S.L.

Company registration number: B76577287
Organization: Netfield Media S.L.
Organization unit: Payments
State / Province: Tenerife
Locality: Santa Cruz de Tenerife
Country: ES

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:2f:b9:69:cd:6f:7b:67:94:fb:fd:e1:19:27:7d:f6
Serial Number (int): 114561406218166842066232666840602476022
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 34:8c:a0:e9:a2:13:dd:2c:c2:e6:c5:cf:82:04:3e:9c:7a:87:07:41
Fingerprint (sha256): b9:32:fb:13:da:e6:d7:ad:df:51:ed:4d:91:01:1a:33:c9:06:cf:2c:9f:62:1b:e6:da:25:f0:3f:c8:fa:03:54

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate paygate.netfield-media.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paygate.netfield-media.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

visor.payment.netfield-media.net
netfield-media.net
avs.netfield-media.net
merchant.netfield-media.net
paygate.netfield-media.net

Other certificates including the domain name netfield-media.net

(limited to 100 certificates)
test2-paygate.netfield-media.net
bankaccess.netfield-media.net
dev-contentadmin.netfield-media.net
dev-master-content.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
dev-contentadmin.netfield-media.net
dev-master-content.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
demo.erofield.com
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
serv50d.netfield-media.net
dev-master-content.netfield-media.net
bankaccess.netfield-media.net
paygate.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
*.netfield-media.net
serv501.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
test2-paygate.netfield-media.net
serv50d.netfield-media.net
bankaccess.netfield-media.net
paygate.netfield-media.net
payment.netfield-media.net
test2-paygate.netfield-media.net
test2-payadmin.netfield-media.net
serv501.netfield-media.net
paygate.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
dev-master-content.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
test2-paygate.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
serv50d.netfield-media.net
dev-master-content.netfield-media.net
serv50d.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
test2-paygate.netfield-media.net
paygate.netfield-media.net
dev-master-content.netfield-media.net
paygate.netfield-media.net
test2-paygate.netfield-media.net
dev-contentadmin.netfield-media.net
paygate.netfield-media.net
serv50d.netfield-media.net

Certificate

The complete raw certificate details for paygate.netfield-media.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114561406218166842066232666840602476022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'B76577287'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tenerife'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Santa Cruz de Tenerife'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Netfield Media S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Payments'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'paygate.netfield-media.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627887450714151744814308057539740230510323158329274108775245775010269637723969582336739815890467315849780236079207603873545085805269908432394378667842837691487670757092162244128451610011446848090961619575249335576040821445766598865031876037576639970258753514422427759511958698109152566052309328636796309872649294420228016909697317843899618134469029540800938367294839448831773920483134873549109457165668033389949571338645740032558657063323637919951179946027600999530471027389473981750390323790221345383003990378479315618004004992106177398575905879501246413808691987076273382532072746722486069765079857213143600770894596032346843554305758428944058716847877036095262142566805723263572236703776063540701866225909601877000841166653129896000738153306777426550195968790151419008074413411713015486574498661266487565634057363063241620231751438151616592891488115977290101619511007352218567501675141385784738487120606119630025209561307782199873033085671625037728722734882943205708141446724540503562904583137820656218852919470913015714741883498778262534983845911087441602419481601067014135540416301286828796477415788348175129551780946060364415053832452818492053758949886050212182760432731306733922770392566209669182989492199011782541943631855921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visor.payment.netfield-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netfield-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avs.netfield-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant.netfield-media.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paygate.netfield-media.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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