GeoTrust Secure Site Starter DV SSL CA - G1

Issued by GeoTrust Primary Certification Authority - G3

About this certificate


This digital certificate with serial number 4d:c4:36:f7:24:f6:84:db:8c:79:49:99:93:f0:99:4e was issued on by GeoTrust Inc. .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: Certificate has set CA true
  • ERROR: In general ExtKeyUsage will appear only in end entity certificates
  • ERROR: Certificate contains an internal server name in the common name '[GeoTrust Secure Site Starter DV SSL CA - G1]'
  • ERROR: Certificate has key usage [CertSign] set
  • ERROR: Certificate has key usage [CRLSign] set
  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set
  • ERROR: Certificate doesn't contain any subjectAltName
  • ERROR: Certificate CN is not listed in subjectAltName

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Organization unit: Domain Validated SSL
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: (c) 2008 GeoTrust Inc. - For authorized use only
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:c4:36:f7:24:f6:84:db:8c:79:49:99:93:f0:99:4e
Serial Number (int): 103369360690625570149807914427121441102
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 25:99:72:41:80:a8:4e:d1:07:fa:81:b3:a1:42:b8:8a:20:08:3c:05
AuthorityKeyId: c4:79:ca:8e:a1:4e:03:1d:1c:dc:6b:db:31:5b:94:3e:3f:30:7f:2d

Fingerprint (sha1): 84:7e:d8:bd:0a:46:f1:0a:89:b1:3d:c3:a1:1f:95:b3:22:d3:f1:3c
Fingerprint (sha256): 62:fb:9b:6c:d2:63:3b:92:d9:1d:b2:64:ce:67:8a:9b:19:c5:75:41:4a:b1:0a:d4:6d:15:7f:07:bb:a2:6e:ff


Revocation information

OCSP Server: http://g.symcd.com
CRL Distribution Point: http://g.symcb.com/GeoTrustPCA-G3.crl

Check the revocation status for the current certificate on GeoTrust Secure Site Starter DV SSL CA - G1
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Cert Sign
CRL Sign

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is a CA certificate
Maximum Path Lenght:

0

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIQTcQ29yT2hNuMeUmZk/CZTjANBgkqhkiG9w0BAQsFADCB mDELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsT MChjKSAyMDA4IEdlb1RydXN0IEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25s eTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eSAtIEczMB4XDTE1MDkwMTAwMDAwMFoXDTI1MDgzMTIzNTk1OVowezELMAkG A1UEBhMCVVMxFzAVBgNVBAoTDkdlb1RydXN0LCBJbmMuMR0wGwYDVQQLExREb21h aW4gVmFsaWRhdGVkIFNTTDE0MDIGA1UEAxMrR2VvVHJ1c3QgU2VjdXJlIFNpdGUg U3RhcnRlciBEViBTU0wgQ0EgLSBHMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMxOpVXDRi/2C8fU+QGyDl1kS0xwwatwptjNAon+cctRROprVIG6j4aE 0fh7v76i5H9kf6EC9um/88r17+LxFXS/gPRHcQG6Wjs+OUW1APo2IG/D1FqEt79P kR4yA7zgwYlBPCnThDCPpSxqLbI1UO6JeVp99RuubSrvnjldT/POHPsDdwxLlfxn C98m+DbRXlvM0e8vKqaR24eQCYlJae7+etqu8ti0uMl3wZ/r+1K31VF0aBjZTJLV WRnZ7q5sMhRKbQePv2Okx3eJovPrhhudm2gqM2j6vWkT1TAdqDjiHcLUkY8gadCk 3evqLm/3WOFKQHkCqpEd+rj21367X7MCAwEAAaOCATowggE2MC4GCCsGAQUFBwEB BCIwIDAeBggrBgEFBQcwAYYSaHR0cDovL2cuc3ltY2QuY29tMBIGA1UdEwEB/wQI MAYBAf8CAQAwSQYDVR0gBEIwQDA+BgZngQwBAgEwNDAyBggrBgEFBQcCARYmaHR0 cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwNgYDVR0fBC8wLTAr oCmgJ4YlaHR0cDovL2cuc3ltY2IuY29tL0dlb1RydXN0UENBLUczLmNybDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgEGMB0GA1Ud DgQWBBQlmXJBgKhO0Qf6gbOhQriKIAg8BTAfBgNVHSMEGDAWgBTEecqOoU4DHRzc a9sxW5Q+PzB/LTANBgkqhkiG9w0BAQsFAAOCAQEAmt/ZIBzMP/XrWl0ziD179/JU Iz9FQktjqumXkTBmUP8OFKHAdFd0/j6BCFq8FgjI1+D503gdUrgw60OgJAn+RGKV MxGSbQJB4X//VIp9JUCaHa7CTSDF22j2Jf3N8qUGh+xLh3F51OcMeRqL/JMjGwJh qjM/tQmvP9/TGIwmZLKvcVvErTzCSe3S9zst7f/zDy1e2pzfXc+Bg9mcFtw+w27g PQx4+VSryBw0+k9kpeAnWT+45Q+Jmbyzel9/QyLEUOPXkG11U9b6AqTWpAdhgzmu WsJVGVZjed/jbapXYN9qf4e4vgHZXbvX5sBoC1sYAAqy6GTbub762Qzc8KZ0/A== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE6lVcNGL/YLx9T5AbIO XWRLTHDBq3Cm2M0Cif5xy1FE6mtUgbqPhoTR+Hu/vqLkf2R/oQL26b/zyvXv4vEV dL+A9EdxAbpaOz45RbUA+jYgb8PUWoS3v0+RHjIDvODBiUE8KdOEMI+lLGotsjVQ 7ol5Wn31G65tKu+eOV1P884c+wN3DEuV/GcL3yb4NtFeW8zR7y8qppHbh5AJiUlp 7v562q7y2LS4yXfBn+v7UrfVUXRoGNlMktVZGdnurmwyFEptB4+/Y6THd4mi8+uG G52baCozaPq9aRPVMB2oOOIdwtSRjyBp0KTd6+oub/dY4UpAeQKqkR36uPbXfrtf swIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 103369360690625570149807914427121441102 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2008 GeoTrust Inc. - For authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Primary Certification Authority - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Secure Site Starter DV SSL CA - G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25791395922137993336344742469983615204500108064854117928040651177393685035011162844457526470709714735052912412000647901215851602517252538022255842441967354662520646100362993089697958992364820825376136029002878702483974379875607906678527261555979443653458897484453364450538710889328631558512819601893222384549340893345572253452050329103613237699091099981249927828561334402310875222715913969126764051194785878235310848309516439707738055187049544738122710914230774348833640543378101785181627007750662234922451744236742027812700454994527234319424522216984598142600334635540659833713151559791479821390166783116482264653747 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g.symcd.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://g.symcb.com/GeoTrustPCA-G3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (7 bits) 0106 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2599724180a84ed107fa81b3a142b88a20083c05 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c479ca8ea14e031d1cdc6bdb315b943e3f307f2d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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