verizonwireless.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0b:7c:3d:a9:16:2b:28:fa:99:bf:36:c4:21:77:ab:bf was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=verizonwireless.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:7c:3d:a9:16:2b:28:fa:99:bf:36:c4:21:77:ab:bf
Serial Number (int): 15266603387498528434185560903174826943
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:33:e7:98:df:62:4c:6a:47:83:67:9c:de:d4:7f:10:07:fb:07:9c
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 16:55:26:40:7c:fa:50:95:19:37:f2:1d:27:17:3a:38:f1:c5:a1:e1
Fingerprint (sha256): 01:98:f2:8c:1d:67:0a:18:6d:8e:3a:86:6b:5b:67:fc:db:4c:5c:c4:4f:da:0f:da:17:74:52:e0:12:16:f1:e9

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate verizonwireless.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for verizonwireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

verizonwireless.com
ice.verizonwireless.com
icedev.verizonwireless.com

Other certificates including the domain name verizonwireless.com

(limited to 100 certificates)
secure07.stage.lithium.com
uc-impres-pub-ne1.telecom.ouroath.com
ringtones.verizonwireless.com
ringtones.verizonwireless.com
mytestbillpay.verizonwireless.com
nyhmpsa01pub01.verizon.com
ewi.verizonwireless.com
businessportals.verizonwireless.com
welktx08vzwvocs-q-nk-esmags-1.verizonwireless.com
indirectorders.verizonwireless.com
eroes-glbl.verizonwireless.com
bizqa.verizonwireless.com
newbillpay.verizonwireless.com
visit.verizonwireless.com
erpdev-srmdmo.verizonwireless.com
sl.e.verizonwireless.com
tester12.verizonwireless.com
ohtwbgs00pub01.tdc.vzwcorp.com
mdata.verizonwireless.com
erpprd-scn-inprd.verizonwireless.com
www.preprodsurvey.verizonwireless.com
timages.verizonwireless.com
cim.apps.verizonwireless.com
presupport.verizonwireless.com
agentcommdev2.verizonwireless.com
pservicedev.verizon.com
tokens.verizonwireless.com
pos-wwsqa5.verizonwireless.com
tonesqa7.verizonwireless.com
obdm.verizonwireless.com
mbwestaccessmgr.verizonwireless.com
posstore.verizonwireless.com
verizonwireless.com
secure.verizonwireless.com
pshr-uatvzwsso.verizonwireless.com
secure03.stage.lithium.com
secure02.lithium.com
presupport.verizonwireless.com
prewestaccessmgrpp.verizonwireless.com
lkg07-mediamanager.svcs.verizon.com
login.verizonwireless.com
erpdev-ws-fnbst.verizonwireless.com
newbillpay.verizonwireless.com
octes.verizonwireless.com
secure03.stage.lithium.com
vpne.verizon.com
crm-aem-prod.verizonwireless.com
newbillpay.verizonwireless.com
b2b.verizonwireless.com
psearch.verizonwireless.com
vzwqa1.sdc.vzwcorp.com
vipsvc-yzeast.verizon.com
txslries01.verizonwireless.com
vzcleanroom.verizon.com
engage.vzw.com
posstore-sqa5.verizonwireless.com
vzomsgsac.verizonwireless.com
cim-dr.verizonwireless.com
lifeonverizon-uat.verizonwireless.com
scmnsmedia.verizonwireless.com
mobilevec-uat.verizonwireless.com
wmediastoretest.verizonwireless.com
vztube.verizonwireless.com
nsavs36-ld-c.verizonwireless.com
pprd-ssoauth.verizon.com
amregnpp.verizonwireless.com
preorder.verizonwireless.com
amstage2.verizonwireless.com
mbss-west.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
psearch.verizonwireless.com
odideviceuat.verizonwireless.com
2wayssl_scm_to_VLocity.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
sni1d57fgl.wpc.edgecastcdn.net
ecrm.verizonwireless.com
nyorbgcolec1p2.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
ptqa.verizonwireless.com
vipsvcqa1.verizonwireless.com
ewi.verizonwireless.com
onepos-ss.west.verizonwireless.com
onevzssosoe-west-yz-sit6.verizonwireless.com
mediaQA2.verizonwireless.com
icedev.verizonwireless.com
mediastore.verizonwireless.com
infodoc.verizonwireless.com
2wayssl-scm-to-TCS.vzw.com
videos.verizonwireless.com
nsavs36-w.verizon.com
sharefile.vzw.com
sposstore.verizonwireless.com
secure02.lithium.com
eroes-ss.south.verizonwireless.com
tmblogin.verizon.com
WELKTX08VZWvOCS-Q-NK-eSMUCW-2.verizonwireless.com
cimdr-test.verizonwireless.com
2wayssl-mtas-to-ecgs-lab.verizonwireless.com
secure03.stage.lithium.com
globalm2mtest.verizonwireless.com

Certificate

The complete raw certificate details for verizonwireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzqUkQiVEerKOhsteHDK
FHUzAPvql+tRrIpE4zEJ+9dFEEsc1vryNGY44GUS3Mxb6vc6JWMSyDDfZ0wmtKg+
hFqHs/KrxZNR4708x+JHhnQMRrxov9pa7mSN3PFN/kASmyD7xJ3rXljYOlMbgZoK
EPevwmzd4ndqRdO6HK9ON4NakCQIbfu/i3vUdHQ6bZ3LiCtPEaN9S8Zxi4YNc1GX
0ZBYja6w7IA+uJ33J/TZtn59+9HyojBDV7xWu3obWd1f98tv6uSXezmGj52PvrFX
FK0YZCMmOIVZ3HFzi0nyluev3D7vHSe8ynS+lrAuhJZqGYfvUNhouKYXWzhWpZWU
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15266603387498528434185560903174826943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verizonwireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23635450069973267955787194115379708618793394425853158917970641559969777019952029106234356998721498527870272240061680752457185921142045965698586560178573775466485957132550368984366643025670860249314838423277074177306057096351595999646167263948679884306215277237352925369194787159800958314314725875263938370684599258253631559147973498373406297184858342551736177899697310924475393892738369381076985909514464099296196502779123468482916665436904205385053606841140628190276183218461698567533404880042365762997698538239058142237896235855097871708209975142629639919310276076729872800390204742857169669032434560757432294151199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c833e798df624c6a4783679cded47f1007fb079c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ice.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icedev.verizonwireless.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090b9d7096f8fa54543a1432c0ca71831643ba6f01489831c779ad89f626f5721de8c6feb345bc2241c6b740460ffecb2b1068f977c2fd1b69733e201b796b2ce364595a6b988dc4340dee55bb1e202a4766848c1d90a8a632c6b6bea1847e97fd8657bdd2c8b6313fd185efed6cab13a56efb86a5c1fd95e985fec543acbd167014b11f6104f4b64d5f7d8bc7c08d36dbf9d05fb167e340b6a58dccf8e9545a7e518017798da3b013755e1915b7bf2ae8013022b56f2c4b137832d71a576c7631151f7cf34ada7eb528a07f1bfd117e141c3766fb361c33e9de2f7000cb4f986bf3e587469dec763304ab0ea908866f5f1de6a190be4f10fd31fe1f488932a77