www.swansonvitamins.com

- Swanson Health Products -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 09:4a was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Swanson Health Products

Organization: Swanson Health Products
Organization unit: MIS
State / Province: North Dakota
Locality: Fargo
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:4a
Serial Number (int): 2378
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): fa:81:c5:48:4e:b3:bf:32:7f:87:bd:fa:3c:6c:1f:ba:b4:0e:87:a2
Fingerprint (sha256): f2:f1:42:ac:83:fb:e9:74:9f:bd:58:6b:42:0b:31:32:39:8a:34:fa:78:24:5d:ec:9c:b2:62:0b:cc:87:39:8d

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.swansonvitamins.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.swansonvitamins.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.swanson-intl.com
swanson-intl.com
sv-staging-ws02.swansonvitamins.com
media.swansonvitamins.com
www.swansonvitamins.com
swansonvitamins.com

Other certificates including the domain name swansonvitamins.com

(limited to 100 certificates)
refer.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
dtm.swansonvitamins.com
*.swansonvitamins.com
www.swansonvitamins.com
www9.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www9.swansonvitamins.com
www.swansonvitamins.com
link.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
swansonvitamins.com
www.swansonvitamins.com
secure.swansonvitamins.com
swansonvitamins.com
link.swansonvitamins.com
*.swansonvitamins.com
www.swansonvitamins.com
*.swansonvitamins.com
swansonvitamins.com
www.swansonvitamins.com
www.swanson.com
www.swansonvitamins.com
www.swansonvitamins.com
*.swansonvitamins.com
www.swanson.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swanson.com
www.swansonvitamins.com
sv-staging-ws02.swansonvitamins.com
swansonvitamins.com
www.swanson.com
*.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
refer.swansonvitamins.com
*.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
*.swansonvitamins.com
dtm.swansonvitamins.com
webtest.swansonvitamins.com
secure.swansonvitamins.com
refer.swansonvitamins.com
www.swansonvitamins.com
swansonvitamins.com
*.swansonvitamins.com
www.swansonvitamins.com
link.swansonvitamins.com
www.swansonvitamins.com
www.swansonvitamins.com
secure.swansonvitamins.com

Certificate

The complete raw certificate details for www.swansonvitamins.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8jxg2Nugiz2BoU7QPZH
wpAfYzCX1XPnSbe7vLhNsNd5GTahSnZE31oqpuNNo5iGYm21MVQeDIAuuqehvIwq
El2wXSI54zAx5z8/e9pTOX2huHa47HbR29zEV3uu6o6Jp9+o3NsuSjjnvzHy9bGT
jY75BXv7djWpybXGx1ckpSBG1LteNqhmchsfNgOb+v4fkGAHOP3P4kIh90+jR5Cv
HYu4z0U5zMuSsqUqlnzFtgHT4q0TRF4CLed5YzfuYLphNLt9rnibuyus1uYHAaFC
ftaBTtBYyj1Mp6jRjxNWpAMRYLxzQmq354QHvM2XhLsTgoJId55FH9x/nPK9zXJR
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-06 12:58:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-07 21:53:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Dakota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swanson Health Products'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.swansonvitamins.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24210605137613209318883097774338961200381025363544191592704946477394827007238361267103035293873415992200706659978784661575270177862673071645686572674075453253513392666676565340486405451668193812823073281146328255954021627444251284878821179892433576393129980345452038889194442904884997204430620221660090532956016768674264832986510373683178314691739436408349771034901065876417183344578460326628516529149813967748139772629421992631568903064820347558816936463168413941051293811348623386554651444296207701839516731597300986835817988959991800130459276744796512194444709579768775122247829087619820454850696699259365396468081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swanson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swanson-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv-staging-ws02.swansonvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.swansonvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swansonvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swansonvitamins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038c2a4c7cb217511741e534dc35896e764154897c82b12e3ea38fe87e1db1d376bee32768b273c9cd5d3c87126351de75645ec5b1b016a9f7bd5a65bf404119830acfffd1fb11503cb7c420358ae335c2d01c2d92937e5fd10445b69f51868b7e77146b8599b9dadf10c26ebc915c832cb24f9f5793a0e3c573275e28e54d7d3760e9d178cb6a4817c81521eb6230b096fd769b5c973531a200423e15041f7b6f5321ec36772918037e6e7719853c198e0bf7f3e00ffe51094fa409c0840249bde0ca280eb96378cf567fdac4ab768b08ccaaf929c19a14eb90e0bb8072bd8c086dbd8a15c4bc4110ec0e4aa8a6604692eb8f985da8de4cdec05f8bd975398d1