analyze.dev.fenxt.blackbaud.com

- Blackbaud -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:31:52:63:19:89:ba:39:cd:66:b4:35:f1:18:8e:e5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Blackbaud

Organization: Blackbaud
Organization unit: Hosting
State / Province: South Carolina
Locality: Charleston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:31:52:63:19:89:ba:39:cd:66:b4:35:f1:18:8e:e5
Serial Number (int): 17536057500351328759943443778912161509
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8f:a2:15:60:1e:c4:69:0a:1a:76:9b:12:e0:5a:b7:7c:63:5d:a5:57
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 20:a4:3c:7a:5a:49:aa:a7:5a:d1:69:d2:db:c2:d4:28:9b:21:50:52
Fingerprint (sha256): 03:97:0d:5f:b9:77:39:11:2e:43:a8:f4:7d:b4:3b:3f:47:d1:03:7c:2d:48:77:3f:d9:ba:1f:60:4f:45:2b:6d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate analyze.dev.fenxt.blackbaud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analyze.dev.fenxt.blackbaud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analyze.dev.fenxt.blackbaud.com

Other certificates including the domain name blackbaud.com

(limited to 100 certificates)
s41afnx03web01.nxt.blackbaud.com
bbmsmerchant.blackbaud.com
statuspage.io
statuspage.io
japan-status.dialpad.com
cwp.status.symantec.com
statuspage.io
give.gf.blackbaud.com
analyze.test.fenxt.blackbaud.com
leapfrog-ssl-15.gcs-web.com
renewalrequest.blackbaud.com
statuspage.io
interactive-services.blackbaud.com
statuspage.io
*.sky.blackbaud.com
anyconnect-bne.blackbaud.com
statuspage.io
statuspage.io
mft-us.blackbaud.com
maintenance.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
sdr.sky.blackbaud.com
statuspage.io
etapestryimpact.blackbaud.com
champions.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
statuspage.io
statuspage.io
sapws.blackbaud.com
statuspage.io
s21afnx10web01.nxt.blackbaud.com
bbkb.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
nonprofitcentral.blackbaud.com
statuspage.io
metrics.blackbaud.com
downloadmirror2.blackbaud.com
japan-status.dialpad.com
maintenance.blackbaud.com
octo.blackbaud.com
scanstore.blackbaud.com
statuspage.io
app.blackbaud.com
statuspage.io
statuspage.io
renxtimpact.blackbaud.com
statuspage.io
statuspage.io
guest-wireless.blackbaud.com
analyze.dev.fenxt.blackbaud.com
ncweb.blackbaud.com
japan-status.dialpad.com
statuspage.io
bbms.blackbaud.com
enterpriseprojects.blackbaud.com
statuspage.io
sapws.blackbaud.com
statuspage.io
maintenance.blackbaud.com
analytics-luminate.blackbaud.com
institute.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
access.blackbaud.com
fenxtroi.blackbaud.com
statuspage.io
statuspage.io
statuspage.io
hello.blackbaud.com
leapfrog-ssl-15.gcs-web.com
internet.blackbaud.com
citrix.blackbaud.com
statuspage.io
www.blackbaud.com
statuspage.io
statuspage.io
s21afnx02web01.nxt.blackbaud.com
statuspage.io
statuspage.io
cwp.status.symantec.com
statuspage.io
statuspage.io
statuspage.io
ncweb.blackbaud.com
statuspage.io
*.volunteernetworkfundraising.blackbaud.com
statuspage.io
services.blackbaud.com
statuspage.io

Certificate

The complete raw certificate details for analyze.dev.fenxt.blackbaud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qmKZNEig7kmDEw+h7jn
MEoiabQpvk7QWzAVpycIEQ6pR4DqmpR0XdAXLuq6AXhaQPCKC81rUNbEF7TcI6/d
qhbqluze21cX2zLT8nYpU1jdXa95T31Ty0k2gPZ8yqmRogt2DvvKX0IMgnwZiniW
87YviiRziqfaBZQsw7HbfYJ0QvNIW5946xpQOgl6RnYKUWthT0N4oRfGdancW/fg
Ds5dYW2FcReT0ewa0orr4SwRqMY/8niG4PzIY7NHlSm8jtIV0j4Fz3DHvup3wZUz
Sjla9LogzncePO+T+sJ3y6RySeArK/+JgKASSiIoJJ4RPk4BXAIalsgJUiZh2PhV
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17536057500351328759943443778912161509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charleston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Blackbaud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analyze.dev.fenxt.blackbaud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26593647629096971640977171824550999959114433781890743008290890798921138214368794921324555849374728856197200883574710458393698990724861056266842787389589824651231820873237361473873985206099238426743416341168068807596246585902469314829878088840016534375649513230302387165792196764461866076465692866403301679316636612361574677567311299502037519741515007884496769070172556805554547057060535751183667865553328804562918696013186305647758382908942520036639233750546258193610622760971384395115316079340749537783224323317538379171205547496704981632016661668337953185219418756361404245739882666853177863998643662959783536252363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fa215601ec4690a1a769b12e05ab77c635da557
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyze.dev.fenxt.blackbaud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162065021e60000040300473045022100d0f53fea5461252d7d75e084e8848fcc712ff34a137a3dd15f9ece23a385f6a802203e7337f7921022d0a559aaf4d5477f0fbb89b24d3a7d774968bca911b7aafd580075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001620650226c0000040300463044022055d10052526ea93140bf9848fd272691f92ff62cece6cc5cb6570c40ae257aca02200a05b555417f0964f3c5b583c78b769d52b52ba8670aed3f8b9fd23c7ce54797
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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