z27os2sut061.bwoffshore.com

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 02:42:9c was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=z27os2sut061.bwoffshore.com,OU=GT40024714+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:42:9c
Serial Number (int): 148124
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 51:7a:90:00:b2:8c:85:7e:f8:ce:16:a7:e1:d7:e2:30:13:00:72:6d
Fingerprint (sha256): f3:3c:3e:60:2b:31:eb:ef:55:07:61:76:96:e1:a2:aa:43:3c:46:79:7b:b9:fd:c2:b5:a3:8c:12:ef:2e:ec:74

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate z27os2sut061.bwoffshore.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for z27os2sut061.bwoffshore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

z27os2sut061.bwoffshore.com

Other certificates including the domain name bwoffshore.com

(limited to 100 certificates)
integration.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com

Certificate

The complete raw certificate details for z27os2sut061.bwoffshore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-28 21:36:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 09:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT40024714'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'z27os2sut061.bwoffshore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709457324573891779600495740446936622995111164244007326649551105434697842512727275232982669846951442127277286703011143142613663799427998362102978431540668801167361153640414252850484401768498677102650876983108072788251827539029185765675252576099762216251851316015624040984660236456174352643659771778625937360009782662087902955036218083327509858026290420786936357058134249332158286132907691141032082182501554368739629369851720965816689549918549345046082065980920595822360507948614848763172821582567513088477286359736778868896739472648288944753138503976160576835256990466152519723907403718778934679565039585744514543609879168611885210476579732176236788860703493935747132752440026922903737941393688456469430606758275103221426344850171037571164778423525683347634374062945687694551735489659399261445074333351591953189167461305417055131190621696960655823360309171840971027747914408814354251533078322733689325757456034201042532121569643121587036122945102008823714191056005027452418661561101063720501791737105971488745524237756649412921938069821573615981860601820063824138993331196194358818095446999758068987453283908562175942300850039867673515463436458758817377779222659844312460863952525592732941366668922362343915210847214562766710136647893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z27os2sut061.bwoffshore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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