*.aegon.sk

- AEGON Životná poisťovňa a.s. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:5a:fe:b5:de:d7:71:1a:46:d9:9b:78:75:2a:45:24 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AEGON Životná poisťovňa a.s.

Organization: AEGON Životná poisťovňa a.s.
Organization unit: IT Department
Locality: Bratislava
Country: SK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:5a:fe:b5:de:d7:71:1a:46:d9:9b:78:75:2a:45:24
Serial Number (int): 13764752816420161165427545615800878372
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:58:3f:11:81:c4:da:39:d8:ff:3b:89:44:e1:82:ae:4c:5e:71:4a
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 2c:36:2e:e5:16:4a:04:c3:b1:af:2e:e6:08:68:36:f9:21:d1:4e:ce
Fingerprint (sha256): f2:8e:30:f2:84:75:26:59:28:9b:5b:17:dd:95:3e:35:ee:46:d6:c5:80:12:ec:68:20:59:3c:16:e8:31:05:e8

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.aegon.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aegon.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aegon.sk
aegon.sk

Other certificates including the domain name aegon.sk

(limited to 100 certificates)
owa.aegon.sk
*.aegon.sk
owa.aegon.sk
www.aegon.sk
owa.aegon.sk
*.aegon.sk
*.aegon.sk
*.aegon.sk
www.aegon.sk
www.aegon.sk
owa.aegon.sk
*.aegon.sk
www.aegon.sk
*.aegon.sk
*.aegon.sk
owa.aegon.sk
owa.aegon.sk
jira.aegon.sk
www.aegon.sk
*.aegon.sk

Certificate

The complete raw certificate details for *.aegon.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKSPkk0sSCpsUr36igMF
/mwNbHXnceWE0e1FcaAYO/MpV2du8TuJQF0Ge3CF8cImFvAGlwjeBdiril7lKTyS
2uqme0D8vkgjb2scBUBepf4BtRMm8h5ZSxH00uNb1MzLWnCaJBBLUkSyY7ekl7M4
0ttBUYt8RSKdqnsk/CW4jVS54pqUF1TltjniQXOWxGIbptSDqKMXDEn1m3jXKoO5
bz4Kp0MfUyE8a0kCafc41wlwVCnuKplHsXXMhGnk4S7UhzEDNdVDPAFnoxSamhEj
lXyx6qiUZeqDub5d2XICNS9XKfUKlpuE4OmSMdm81VB22pVVY8gSGKQ/gxVRo7Nv
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13764752816420161165427545615800878372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bratislava'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AEGON Životná poisťovňa a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aegon.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17249557443176367787450012194739244264779081556372133020783406538969189945507664615889463585508211873613460670713162911428674798720204770165343649853750867952329363494869370062701920323758668142670943187900056454709727319993090983880343961417221722219969661576004920635677444400641993626355345081464939421453508626032157962599693247409586685922186090729832268265201831592252314133251438387596779256962507713041125806735771703023625590530940805252290312216636900031790966853272988600597213304713533541777908934661467857051195999169045477829509386018794937844238634135312010166228292537294302446420221669965975107366787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d583f1181c4da39d8ff3b8944e182ae4c5e714a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aegon.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegon.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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