sts.pronet.com.tr

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:76:5b:c8:13:d1:d0:7b:b7:27:02:c3:50:1f:ad:71 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sts.pronet.com.tr

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:5b:c8:13:d1:d0:7b:b7:27:02:c3:50:1f:ad:71
Serial Number (int): 4602236567702157651034609683028487537
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 69:1e:90:5a:b1:1b:01:d0:78:a8:3e:5a:35:b2:a0:18:23:91:13:28
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 57:7b:cf:2f:56:4f:35:31:7d:d5:dc:cc:19:f5:7b:40:c4:30:a3:05
Fingerprint (sha256): bf:ab:e0:a1:5d:d2:7d:85:e0:6a:0a:7f:65:c7:d7:74:0b:cd:05:5b:ba:08:c1:39:40:22:f5:62:0e:f6:d1:fd

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate sts.pronet.com.tr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.pronet.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.pronet.com.tr

Other certificates including the domain name pronet.com.tr

(limited to 100 certificates)
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
cdnd.pronet.com.tr
mdc01.doracdn.com
moim.pronet.com.tr
mdc01.doracdn.com
iphone.pronet.com.tr
mdc01.doracdn.com
sts.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
sts.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mail.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
www.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
sts.pronet.com.tr
pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
cdnd.pronet.com.tr
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
uzakofis.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
sts.pronet.com.tr
sts.pronet.com.tr
web.pronet.com.tr
*.pronet.com.tr
*.pronet.com.tr
mdc01.doracdn.com
docsd.pronet.com.tr
mdc01.doracdn.com
*.pronet.com.tr
*.pronet.com.tr
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
abone.im
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
*.pronet.com.tr
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
mdc01.doracdn.com
sts.pronet.com.tr
sts.pronet.com.tr
mdc01.doracdn.com
kisisayma.pronet.com.tr
mdc01.doracdn.com

Certificate

The complete raw certificate details for sts.pronet.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzA0ZkdcoYsiCXFQ+eoW
9xj4a+ucNcCVg4PYgIsJ8zp7mt0phj9U9IOGjvRv42eECGgcxHbYR6P/Wp3aYmFc
ufJkRcQo3sVIKD+ADOuE+A7qObIMSDhcB/EIKeehiDZksuneHbMNLhuLTIQQOjFG
7qV/S8U6f1A9pxiCCZASRDaJpbc4u4Nrl3Am1ljq3zWQmm1ioTOeQGSHCBw+4z6/
D8sj2WnnpMpl4fvHsTm0xBNfl0peiA/1PzWqvnJODEm5VKcUOWn7UACFTqCPQmAD
1BDjrEVaFH51l1hD0bpsD0K6k92sdvIDLKCPrH9el3JmkF0h9SkmNceoM5QCcBCS
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4602236567702157651034609683028487537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.pronet.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23630333645089975465442203154230783015132574536827565783190895686703517917533798593243580178716890983605137589136734859220800368965741804567315678909444733986156744027629299222687289591488798054184716220607972984686001198638524899652420385005976848075860621671331005992578129232299413633559696740372794245910625963384284871349691915485525243963775206310193378336733556031328805637810327310837028874468292081824540993860204109249850425646243356512870760290134451834856808620201848954907436996815675145575458615321963185819215555651408594646956107155661962029598986928324625859911869219520054996765808795931109447733811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							691e905ab11b01d078a83e5a35b2a01823911328
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.pronet.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172accbd03e0000040300463044022003465008cad0d02196086fb55ad8ce6286b59b4069c1858c6a8277b4971a521f022037eb0fb9e5a56f289094fda1568938c4173039d07bba5ae9b38449e44ef2dbc70075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000172accbd069000004030046304402204790b4f3c4db0e74b820ec13438017b9b92a33bed6c5c495750c79edf99fcf5102200f7d204327bbe121be6a2ffcf566c03b861a86c0b5e533d33c1e66039e6ea51f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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