gp.acddom.acdlabs.com

- Advanced Chemistry Development Inc -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:82:38:a7:71:fe:bc:88:e9:4c:c1:4c:6a:85:2a:e1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Advanced Chemistry Development Inc

Organization: Advanced Chemistry Development Inc
Organization unit: ACD Toronto
State / Province: Ontario
Locality: Toronto
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:82:38:a7:71:fe:bc:88:e9:4c:c1:4c:6a:85:2a:e1
Serial Number (int): 16626883622349226040703874551165299425
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:e9:86:f5:75:d3:1e:d2:8d:f5:86:40:35:c0:1a:f1:88:97:ae:e8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 3c:9b:6f:0f:83:69:58:d5:c2:51:07:af:04:04:bd:d5:4c:e8:03:92
Fingerprint (sha256): 00:bb:b0:87:3d:fd:4c:74:86:40:04:0d:86:b1:3a:28:80:9f:ec:9f:d6:26:5b:cd:56:65:34:c8:7f:af:df:d6

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate gp.acddom.acdlabs.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gp.acddom.acdlabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gp.acddom.acdlabs.com
gp.acdlabs.com

Other certificates including the domain name acdlabs.com

(limited to 100 certificates)
ithelpdesk.endologix.com
gp.acddom.acdlabs.com
slxweb.acdlabs.com
webmail.acdlabs.com
*.acdlabs.com
ilab.acdlabs.com
*.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
firewall.acdlabs.com
webmail.acdlabs.com
blog.acdlabs.com
ithelpdesk.endologix.com
blog.acdlabs.com
www.acdlabs.com
support.unpri.org
ithelpdesk.endologix.com
*.acdlabs.com
zendto-ext.acdlabs.com
*.acdlabs.com
webmail.acdlabs.com
ithelpdesk.endologix.com
ilab.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
*.acdlabs.com
blog.acdlabs.com
helpdesk.dpsgroupglobal.com
support.unpri.org
*.acdlabs.com
www.acdlabs.com
owncloud.acdlabs.com
ithelpdesk.endologix.com
webmail.acdlabs.com
exchange.acdlabs.com
support.unpri.org
MAILSRV-01.ACDLABS.COM
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
blog.acdlabs.com
acdlabs.com
acdlabs.com
ilab.acdlabs.com
www.acdlabs.com
support.unpri.org
webmail.acdlabs.com
*.acdlabs.com
predictum.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
*.acdlabs.com
ithelpdesk.endologix.com
SLXWeb.acdlabs.com
helpdesk.dpsgroupglobal.com
blog.acdlabs.com
www.acdlabs.com
ilab.acdlabs.com
servicedesk.acdlabs.com
syncsrv.acdlabs.com
webmail.acdlabs.com
acdlabs.com
ithelpdesk.endologix.com
owncloud.acdlabs.com
ithelpdesk.endologix.com
acdlabs.com
*.acdlabs.com
ithelpdesk.endologix.com
support.unpri.org
ithelpdesk.endologix.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
*.acdlabs.com
ithelpdesk.endologix.com
tor-ftp-srv.acdlabs.com
servicedesk.acdlabs.com
ithelpdesk.endologix.com
bpservicedesk.bpsoftware.net
blog.acdlabs.com
MAILSRV-01.ACDLABS.COM
helpdesk.dpsgroupglobal.com
ilab.acdlabs.com
ithelpdesk.endologix.com
support.unpri.org
ithelpdesk.endologix.com
webmail.acdlabs.com
ttservicedesk.proman.org
ilab.acdlabs.com
itsupport.acdlabs.com
helpdesk.dpsgroupglobal.com
gitlab.acdlabs.com
zendto.acdlabs.com
ilab.acdlabs.com
gitlab.acdlabs.com
ilab.acdlabs.com
www.acdlabs.com
firewall.acdlabs.com

Certificate

The complete raw certificate details for gp.acddom.acdlabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXZayC/CxG03xYBRhN7b
mFg+sZDBKHiEOtfPhp0Oc9toXIY895sM0u6A4S2YhKB/f4W/oYNC15sto3M+IIHM
MBAgZVFthnsDYmhaIYK5DAm2D3DkbxL0HKjWjMa2EK9JORVxJS1KDyd9NKFfBJdl
wXzCzEVBEKhmT772gPCPp6cK4uJNSMi7wHX1GP9xQ7DemAKxgOhOMtT3h06uJKkT
92Boswa5JrA1hz7GcGdRa0vrxHjKitNOmmEi9LkBqFwvCjShgihg0zK97J56dqFO
XAvAQWHQmcy6w6ITzBTO0KHnXvMTg6xK7NO77Ei3+VAlWo0RQK52vnW8u7sCyO00
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16626883622349226040703874551165299425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Advanced Chemistry Development Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ACD Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gp.acddom.acdlabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20887683156306660530626495668712432018302264610797905520617729710751032172355544455797621182490271433269597885234757426536516729846832961131199631681945232158702455474473779115144743414928765261166290779249681853830547726431241954399039987064740067019637743628081325074489204018556303400156523055491479535644631627690927334363009442765660226800641676581583706224710551937959224704553023018430863559142856885694045930779090114392358912759360685189439045119623885399879635452622245585700459789593974694896445829073019281663550401071301423991146842478376673552347566992434425736125080932672679813853079361515298717775003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09e986f575d31ed28df5864035c01af18897aee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gp.acddom.acdlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gp.acdlabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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