www.porvairfiltration.com

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 45:2f:b4:20:70:63:2f:d3:05:98:91:49:44:74:f3:d9 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.porvairfiltration.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:2f:b4:20:70:63:2f:d3:05:98:91:49:44:74:f3:d9
Serial Number (int): 91964423065322420486062156307483653081
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): 88:84:cc:ea:84:64:2e:39:3f:80:7c:1b:3d:08:6e:b9:04:e5:7d:27
Fingerprint (sha256): d7:0a:00:d2:46:a1:80:05:bc:d9:74:19:21:69:47:5e:29:b3:4c:03:1c:44:cb:96:d5:d0:3e:17:9f:38:8d:8e

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate www.porvairfiltration.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.porvairfiltration.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.porvairfiltration.com
porvairfiltration.com

Other certificates including the domain name porvairfiltration.com

(limited to 100 certificates)
qlik.porvairfiltration.com
servicedesk.monaghancoco.ie
catalog.porvairfiltration.com
helpdesk.porvairfiltration.com
helpdesk.llyc.global
www.porvairfiltration.com
intranet.porvairfiltration.com
catalog.porvairfiltration.com
intranet.porvairfiltration.com
*.porvairfiltration.com
pomoc.lekam.pl
mail.porvairfiltration.com
catalog.porvairfiltration.com
servicedesk.monaghancoco.ie
catalog.porvairfiltration.com
pomoc.lekam.pl
media.porvairfiltration.com
sd.kormotech.com
helpdesk.nauit.lt
help.sch1584.ru
www.porvairfiltration.com
defiant.ptl-net.com
catalog.porvairfiltration.com
triton.porvairfiltration.com
helpdesk.nauit.lt
www.porvairfiltration.com
mail.porvairfiltration.com
catalog.porvairfiltration.com
catalog.porvairfiltration.com
intranet.porvairfiltration.com
helpdesk.aldaholding.com
servicedesk.monaghancoco.ie
defiant.ptl-net.com
*.porvairfiltration.com
www.porvairfiltration.com
defiant.ptl-net.com
helpdesk.porvairfiltration.com
www.porvairfiltration.com
qlik.porvairfiltration.com
www.porvairfiltration.com
catalog.porvairfiltration.com
www.porvairfiltration.com
qlik.porvairfiltration.com
*.porvairfiltration.com
www.porvairfiltration.com
defiant.ptl-net.com
catalog.porvairfiltration.com

Certificate

The complete raw certificate details for www.porvairfiltration.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOf6rmviePpiMngDx5td
JxtFCxSaTwMQ4B8uZhyHL5sWV5AHzF7DOw6Dp1EqZf3DjWiyYgXiJnzgWMmuuFpW
LfrBjZ8GMxi5hr7tS0skP/61Kn3qPLi8vP/di6TAecGjfR0EMkskxXsVjuqpbYUC
NnfLM5nHtZfGUdZRFjl6YB6gr99CnufQ9PdIlQDMWsnMv76RFYkG+guDfTjy3hyd
APF28lRyrZVqPc/XAfK6RyJNCeDvR/2DYuXC1FmcoAQYhIifMekiPNL9mLyBeJb0
sVbFnwOLFJ9QWNkATjZkxdiPdsGG9qzei8ePemUyMhhTpeWTJnuJbV1PgIJ1xu8/
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91964423065322420486062156307483653081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.porvairfiltration.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24352147772311447677230031027635453788301695414148551522994897922665997025596745983089492546924964710036167927447373866837788865554255501466133889226429205419731338838520214917272446599276509689773090887091641321340149331584919946696494580021061272035015305578410664625189170758115798289303086638747989710330401753059778711203294965182921412493006125169194863083582454771065352565807021189589025600711822754334734167003388760241824124531507713234127587539090870313708050085714113326976257438129983179176248005687273223790665967517988105996915021835930738842669443154252210699492857394523300110902620824925289703227233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porvairfiltration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porvairfiltration.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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