gems.vzw.com

- Verizon Data Services LLC -

Issued by DigiCert Baltimore TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:7a:91:48:19:e2:cb:c1:8b:d4:eb:12:ca:0d:00:94 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:7a:91:48:19:e2:cb:c1:8b:d4:eb:12:ca:0d:00:94
Serial Number (int): 19245598819561606402037896890481967252
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:03:d7:22:e4:e8:24:8d:d0:1d:6b:88:4a:29:a8:7b:58:50:75:31
AuthorityKeyId: f2:56:9b:07:86:07:99:53:7e:12:2c:f8:7d:2f:e6:d5:26:d8:93:54

Fingerprint (sha1): 81:ae:f0:c7:05:ed:76:25:bf:99:8e:79:e3:bc:bc:3e:7f:f6:d9:f6
Fingerprint (sha256): 04:26:b1:71:1c:f7:4f:81:c5:8d:31:bd:15:ba:de:22:0b:82:12:37:16:ed:0a:ed:cf:2a:ea:c9:61:6e:20:9e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl

Check the revocation status for certificate gems.vzw.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gems.vzw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gems.vzw.com
uat.gems.vzw.com
staging.gems.vzw.com
sandbox.gems.vzw.com

Other certificates including the domain name vzw.com

(limited to 100 certificates)
mobile-sit.vzw.com
selfserve-ppd.vzw.com
businessportals.verizonwireless.com
learningalbum.vzw.com
pp1ms-tdc.vzw.com
selfserve-uat.vzw.com
vcastlive.vzw.com
PSMSADMIN.VZW.COM
web.vma.vzw.com
Cassandra-D3-SSL.vzw.com
locationmanagement.vzw.com
ringbacktones.vzw.com
secure02.lithium.com
lkg07-mediamanager.svcs.verizon.com
scep.familybase.vzw.com
otadm.vzw.com
octes.verizonwireless.com
mediaimages.vzw.com
vstore.vzw.com
sredirect.familybase.vzw.com
emaglab.vzw.com
vzcleanroom.verizon.com
engage.vzw.com
www.verizonquickguide.com
mitestmail2.vzw.com
senaent2.vzw.com
vztube.verizonwireless.com
text.vzw.com
muat1.m.vzw.com
selfserve-euat.vzw.com
locationmanagement.vzw.com
verizonmdm-demo-qa.vzw.com
testglobalnav.vzw.com
fl.vzw.com
2wayssl_scm_to_VLocity.vzw.com
dc3-mediamanagerpc.vzw.com
gems.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
maa-collector.vzw.com
verizon.com
gems.vzw.com
gems.vzw.com
dc2-mediamanager.vzw.com
rmt-n.vzw.com
rdd.vzw.com
push-dev-e.vzw.com
lcms.learningalbum.vzw.com
2wayssl-scm-to-TCS.vzw.com
sharefile.vzw.com
flstage.vzw.com
secure02.lithium.com
netgeo.vh.eng.vzwcorp.com
vzwlpsstg.vzw.com
auth.learningalbum.vzw.com
dc5-mediamanagerpc.vzw.com
text.vzw.com
coreent2.vzw.com
login.vzw.com
ess.emag.vzw.com
ice.verizonwireless.com
vztube.verizonwireless.com
vzwworkshops.wds.vzw.com
merchmanual.vzw.com
Mail2013mdm1.vzw.com
www.vzw.com
secure02.lithium.com
go.vzw.com
2wayssl-ccpa-to-McAfeeSafeWifi.vzw.com
Cassandra-T3.vzw.com
autodiscover.verizonwireless.com
dc3-mediamanager.verizon.com
JDBC-SSL-Nonprod.vzw.com
lls-dev.vzw.com
2wayssl-scm-to-NetMotion.vzw.com
mivsp-retdev.vzw.com
selfserveapps.vzw.com
udm-pp.vzw.com
mdmcuat.vzw.com
secure02.lithium.com
verizonquickreference.vzw.com
spg.vzw.com
vzwlpsstg.vzw.com
secure02.lithium.com
govzw-qa.vzw.com
solutionslab.vzw.com
lkg06-mediamanager-origin.svcs.verizon.com
ringbacktones.vzw.com
sticache.vzw.com
lls.vzw.com
www.vzw.com
mdmr.vzw.com
rdd-n.vzw.com
enrollnvz-d.vzw.com
vstore.vzw.com
fl.vzw.com
mvs-pp.vzw.com
mobileservices-wsit1.vzw.com
otadm.vzw.com
verizonquickreference-uat.vzw.com
iot.vzw.com

Certificate

The complete raw certificate details for gems.vzw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUASREJGAXIxe0XoEgBa
Sc4bvWj/KJYbL90JE20UVm+3nMPBlC4eqguiMl+oV1UPsZHpO7v70wH53f/lC9rM
qOp1KRaibHnGUsaPiAd8xaDJbze21/s98N1PY9MEELu64iZho/Q78j39ugqU+1jC
qVoliPV5sz2PrKQ4EjI9716AvOJ4EEwyBmKf2ExcSavTLTtfnOhjpChvFubTTwNi
CWVzWwFhaP4cruFzrvoU0fe+5qgGRWaYi5qFMeuGg21xCDGsCN7rsJheKl3rHUxF
3gdobyhO5JQ6ip8KugdeUTo9yoSNOwGtfWbSqzIRH+kewswujfxvjWZIiH4wTVH+
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19245598819561606402037896890481967252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gems.vzw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21365868301497822597858101252709261349767837427836909373496029156451700839656298370918756159337866547283098067991370040890521699216564118548380318640450200828724852797701868936580943828584824560518749205962926300574831445689881040675202615612199692715066123514397352146223279379275114615134918604646767011177075543209394794365311117239615515626103394129849750838499374480411963832166032438778424823387116266374452829089028600093239872632744520757418494455336268386061968940315320195967393188825470753304192206351335716299412663634083716867439419605415089293258343404090929503301866550756557495173198341403468429917913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2569b07860799537e122cf87d2fe6d526d89354
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0103d722e4e8248dd01d6b884a29a87b58507531
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gems.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.gems.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.gems.vzw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.gems.vzw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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