www.reflektis.com

- Reflektis -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 0c:fa:ee:5a:2d:2a:32:18:64:6a:43:e3:a3:dc:dc:e2 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Reflektis

Organization: Reflektis
Organization unit: www.reflektis.com
State / Province: Groningen
Locality: Usquert
Country: NL

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:fa:ee:5a:2d:2a:32:18:64:6a:43:e3:a3:dc:dc:e2
Serial Number (int): 17253644522050829657995605835983412450
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 51:3b:54:00:04:52:91:cb:d1:64:06:21:c3:0c:05:c3:3e:43:61:23
Fingerprint (sha256): be:5e:ee:1e:5e:76:a0:98:49:e5:08:8d:1b:95:f3:27:6c:0f:9d:c9:a0:07:ca:20:c2:6d:83:97:9a:17:24:90


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate www.reflektis.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.reflektis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name reflektis.com

(limited to 100 certificates)
payments.inursecoach.com
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk

Certificate

The complete raw certificate details for www.reflektis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17253644522050829657995605835983412450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Usquert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.reflektis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.reflektis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909415828385423047902565262187698564332597786042052779748297406801359593843842280046511504056577680337200744861538957839898958371492447355546576499228151351858364186546565653927071188480033226364459679492961031109607498986229977332125865055627781263119282116467806699274923980673351623859640697759052071032296950934822776046370337357774351030152111546608533802815748084364427189955589559245364197934202739786113365044769549001549126166083179789818701945481657649506521104565313649047554339718238028930271863278876774294859459543766234602374313372365251858114211725787188212168337509052423053046653361942469215278210330941193703236771468486015049173077225928098824646001585274355140127363129099353725006736841090887351404723100684997032091356005814063663924951713612093341403532718782300465391005930631640382805503033839801754940368422926239141829796826972640025872827784360108740292509996728442443666049365586433865642622999367515161293272695978719284493141531793775612218165346128323720552012605279815814351296360858597433645199437644834661886215211890270870828553325869717923093797261921179911916086267273640047476138523787317287876449094620924938368151452004092442944624893227377049492709980378233097161680415521585617994549392107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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