test.belrai.org
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 59:48:1f:4e:aa:fe:f9:2f:13:e4:68:31:7f:7f:53:d7 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=test.belrai.org
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 59:48:1f:4e:aa:fe:f9:2f:13:e4:68:31:7f:7f:53:d7Serial Number (int): 118675771986087105157589867404680188887
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): ad:2d:c1:d8:3d:9b:97:ba:d3:b3:ed:59:a7:39:bd:a8:84:7b:aa:4e
Fingerprint (sha256): db:7f:2b:68:a7:16:1e:62:66:f7:6c:1b:14:67:df:8f:35:a8:e8:ea:90:eb:10:39:a1:da:79:ea:74:0e:87:3b
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate test.belrai.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.belrai.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.belrai.org
Other certificates including the domain name belrai.org
(limited to 100 certificates)
belrai.org
wiki.belrai.org
test.belrai.org
old.belrai.org
test.belrai.org
belrai.org
www.belrai.org
test.belrai.org
old.belrai.org
belrai.org
belrai.org
belrai.org
wiki.belrai.org
belrai.org
belrai.org
wiki.belrai.org
belrai.org
test.belrai.org
belrai.org
belrai.org
belrai.org
www.belrai.org
belrai.org
belrai.org
www.belrai.org
wiki.belrai.org
belrai.org
www.belrai.org
belrai.org
belrai.org
test.belrai.org
belrai.org
belrai.org
test.belrai.org
www.belrai.org
www.belrai.org
belrai.org
www.belrai.org
demo.belrai.org
wiki.belrai.org
test.belrai.org
old.belrai.org
test.belrai.org
belrai.org
www.belrai.org
test.belrai.org
old.belrai.org
belrai.org
belrai.org
belrai.org
wiki.belrai.org
belrai.org
belrai.org
wiki.belrai.org
belrai.org
test.belrai.org
belrai.org
belrai.org
belrai.org
www.belrai.org
belrai.org
belrai.org
www.belrai.org
wiki.belrai.org
belrai.org
www.belrai.org
belrai.org
belrai.org
test.belrai.org
belrai.org
belrai.org
test.belrai.org
www.belrai.org
www.belrai.org
belrai.org
www.belrai.org
demo.belrai.org
Certificate
The complete raw certificate details for test.belrai.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQWUgfTqr++S8T5Ggxf39T1zANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDQxMzAwMDAwMFoXDTE4MDQxMzIzNTk1 OVowGjEYMBYGA1UEAwwPdGVzdC5iZWxyYWkub3JnMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAqMj2NspS6M0bK/2DM90erPhHuM0idcCyCaqJP1WdWh5L nzNB48/lsoE0rSk6eIWhgSy4OKc4Revj1olPQmz0LKe0evh9m1sdnUOvfh2KahfL apm95V/vGa02IDmytLBQk1R2YJ23ECv/4oWpgk/uC2rg1fKoSiwH4WMVXjpIyuGD RQauAwoK5Ko7OdUpG3OuWhu8YsijU047HJ8ZBwCKJfoI6Yi4XG80wtW0vevx04u/ tf6UBAjU3qs3/f38ND9BBuawJdJk9xvCe9Tf/5wszrRWp2YgswQOVZLE44LHMP0b p4T24aXBqG/hcvInVMNMVfHsSveRGP0rC/SanNkhFQIDAQABo4ICejCCAnYwGgYD VR0RBBMwEYIPdGVzdC5iZWxyYWkub3JnMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0gBGgwZjBkBgZn gQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xl Z2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdh bDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVtoBblOAAAE AwBIMEYCIQCZ3UdzXd2lNLYZ8u2s7W/V+chARMb8AbKL/2aTpNp4mwIhAKQRdbJm i8ZeMspxSKFtnBWj8Ay4lhXXVtZJdlQmngsIAHUApLkJkLQYWBSHuxOizGdwCjw1 mAT5G9+443fNDsgN3BAAAAFbaAW5hwAABAMARjBEAiBSqksp4JPZsDik6BjmRqq+ VsXZlnEOQUqNBrBBzNBy4wIgGPkr0nfzPJB5k8kMtsZ3NGNSYqHdSxQA8ZKbF1Ji 8dswDQYJKoZIhvcNAQELBQADggEBAILYQ8MFnWaYgOmLMn5zizO13tCOrYk2fnok iaFpwVu12V/T8QY2q+iGFyIOKdUrliIRdwu7DfXggk7cp804bGjUfd1WckotIhi8 d4iHhnilR1QzEdumrxnnhjDa4cgZhAV144ZCBDCYpoj8GOwMzrfC5Q289+LhQ7o+ r1LUDpvnr8AnI4GxIzKo8K4mizmpcPLLchaCyqdc/E9Tltvjt+nQPaKeB6aRzG5R 9CDlGPEEelQris3BOFWT9DaPsfHWOHLfgce/MEoe8uAQ9n6/tNh8UE5e2g1ye6gt 4avpOylltNYC8oGvKg1S7Y8LDwWT1MkXeHUGBxld8DWOaXWh+3o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMj2NspS6M0bK/2DM90e rPhHuM0idcCyCaqJP1WdWh5LnzNB48/lsoE0rSk6eIWhgSy4OKc4Revj1olPQmz0 LKe0evh9m1sdnUOvfh2KahfLapm95V/vGa02IDmytLBQk1R2YJ23ECv/4oWpgk/u C2rg1fKoSiwH4WMVXjpIyuGDRQauAwoK5Ko7OdUpG3OuWhu8YsijU047HJ8ZBwCK JfoI6Yi4XG80wtW0vevx04u/tf6UBAjU3qs3/f38ND9BBuawJdJk9xvCe9Tf/5ws zrRWp2YgswQOVZLE44LHMP0bp4T24aXBqG/hcvInVMNMVfHsSveRGP0rC/SanNkh FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 118675771986087105157589867404680188887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.belrai.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21307133178258440717327227869303578658132243577022193182401516669520123273004063508357104437628713225652885079084656837818094590711107433654166098883018821054833615794601463813157880025391119658124366680334608288413162283145045875158334541736646407888093726328229706143453233796221736120267759236465364823690767517660906667648480968421919263493436016811046649061913588346328112655385750444951575693313250280120469215428146576750379066183510235162051618828085396706646087959545814825500110089289245213434795313211805496461916894191780701031232169979264857467765056819200349049033025347645769089842671681108444408520981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.belrai.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b6805b94e000004030048304602210099dd47735ddda534b619f2edaced6fd5f9c84044c6fc01b28bff6693a4da789b022100a41175b2668bc65e32ca7148a16d9c15a3f00cb89615d756d6497654269e0b08007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b6805b9870000040300463044022052aa4b29e093d9b038a4e818e646aabe56c5d996710e414a8d06b041ccd072e3022018f92bd277f33c907993c90cb6c67734635262a1dd4b1400f1929b175262f1db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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