*.jed1.medallia.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 7c:04:df:81:cb:42:e5:79:4f:50:e8:74:0d:68:1d:e5 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.jed1.medallia.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:04:df:81:cb:42:e5:79:4f:50:e8:74:0d:68:1d:e5
Serial Number (int): 164849573925444615970713835320828763621
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8a:d6:f4:f1:7f:79:e9:31:12:f1:21:85:87:ea:43:20:a2:15:b8:ae
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): e8:d3:b3:ee:e2:97:9a:8a:fe:c3:ec:20:0b:46:8e:ef:02:42:2f:71
Fingerprint (sha256): 04:5d:56:82:31:bc:9e:95:16:0a:15:4f:be:3a:39:4c:29:41:6a:3e:c8:22:d9:26:c3:74:01:b9:3d:1b:20:1d

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.jed1.medallia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jed1.medallia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jed1.medallia.com
jed1.medallia.com

Other certificates including the domain name medallia.com

(limited to 100 certificates)
*.aws-stg.medallia.com
1e291ab3status.snowflake.com
e2.shared.global.fastly.net
*.medallia.com
dns-vetting1c.map.fastly.net
es.medallia.com
*.sbx.usps.medallia.com
blog.medallia.com
*.jiveon.com
pt.medallia.com
1e291ab3status.snowflake.com
jobs.medallia.com
medallia.com
*.usps.medallia.com
*.digital-qa2.medallia.com
e2.shared.global.fastly.net
www.medallia.com
bp1054598.saagie.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
e2.shared.global.fastly.net
sales.medallia.com
medallia.com
*.md-apis.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.sbx.den.medallia.com
e2.shared.global.fastly.net
ocem-assessment-b2b.medallia.com
g2.shared.global.fastly.net
*.digital-cloud-syd1.medallia.com
*.digital-cloud-bofa.medallia.com
e2.shared.global.fastly.net
*.crowdicity-us1.medallia.com
*.sbx.sc4.medallia.com
*.eng.medallia.com
radius.medallia.com
e2.shared.global.fastly.net
*.iad1.medallia.com
bunnings-surveyauth-qa.customapps.medallia.com
blog.medallia.com
cvs-surveyauth-qa.customapps.medallia.com
bankofamerica.medallia.com
e2.shared.global.fastly.net
e2.shared.global.fastly.net
statuspage.io
statuspage.io
g2.shared.global.fastly.net
medallia.com
*.appsol.medallia.com
*.aws-stg.medallia.com
metrics.medallia.com
bp1054598.saagie.com
statuspage.io
*.apis.crt-qa1.den.medallia.com
zulu.tau.medallia.com
g2.shared.global.fastly.net
product-descriptions.medallia.com
cs-sm.medallia.com
*.sbx.fedw1.medallia.com
*.jed1.medallia.com
*.jed1.medallia.com
bp1054598.saagie.com
go.medallia.com
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
eola-test-survey.medallia.com
medallia.com
g2.shared.global.fastly.net
*.aws-lhr1.medallia.com
*.monkeylearn-1.sea1.medallia.com
*.eng.medallia.com
*.digital-cloud-gov-stg.medallia.com
*.apis.eng.sin1.medallia.com
e2.shared.global.fastly.net
1e291ab3status.snowflake.com
walmart-surveyauth-prod.customapps.medallia.com
*.digital-cloud-gov.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.agileresearch.medallia.com
*.fra2.medallia.com
*.sbx.voice.medallia.com
sea1.cdn.survey.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
g2.shared.global.fastly.net
api.medallia.com
*.hnd1.medallia.com
*.stella-legacy-devops.medallia.com
sales.medallia.com
dns-vetting1c.map.fastly.net
medallia.com
ix1.gc.medallia.com
medallia.com
*.sbx.ibm.medallia.com
*.stella-legacy-devops.medallia.com
1e291ab3status.snowflake.com
*.aws-pdx1.medallia.com
zenith-cb.ad.medallia.com

Certificate

The complete raw certificate details for *.jed1.medallia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBRtwTWu/jA0TAsMae9n
S5Brx1t03TeWtg2BbJzU16jDuzZh47usXpvT5GF4dLJ9SVbrFNKdM34ne/dHrPeY
a99q+TMHCuKoxMhsTKDf6hsZsSo0hIXQaG9wUInGf2wkXCpAXvc8vnmpTChlDgh7
0Fm1yopLFsMEU5G0Esc39WRZorWQpadkPwx/6DeYYGmVbB+sdbu87khleWmNhb6q
Soihibk6K7E0EBhmEFD2iVsBQU8YU9bIX23Q+iWoEPyyIuPc3vU4ouJuk8YGkEAU
tt+sr9ztjavB4+PARP7uislMzvp6jRMPBO3+gWDoMjtgnubjrtJWv5pfHUbVUJ5U
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164849573925444615970713835320828763621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-25 07:00:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 07:00:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jed1.medallia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23742875115539221381526984828772654062952624407762178982831917683950752419279447513661015448608011476596301759778564787351003471299687977703906222569576865816273436885499721399539119107608182263730135477584401492686447804583244486778264449565975859011638767856903967677568511460450423620191026256073836195908855968148001275114231703452349635492192737384155020104212555344524895435326929650494339398550630309180677683117663550714435842987489329931593316506507930944154169840755218152354760397777353675192827644527904930112084522161836611860548280179762419056886013376234146522826513814682453157584204353636866696565779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jed1.medallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jed1.medallia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ad6f4f17f79e93112f1218587ea4320a215b8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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