*.dotdigital.com

- DOTDIGITAL GROUP PLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 39:32:c2:a3:d0:50:b7:20:28:8a:53:08 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DOTDIGITAL GROUP PLC

Organization: DOTDIGITAL GROUP PLC
State / Province: London
Locality: London
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 39:32:c2:a3:d0:50:b7:20:28:8a:53:08
Serial Number (int): 17702011011725060008649052936
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 45:95:60:18:dc:2e:09:c8:60:ef:08:08:84:01:8e:ec:4c:c7:55:67
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): be:ba:69:70:06:8e:f3:1e:a8:9a:c1:4b:3d:08:fa:a4:67:75:c4:d5
Fingerprint (sha256): 06:3b:35:f3:12:29:b1:e8:d3:e0:32:7a:e7:5a:a4:7b:67:be:23:e6:29:10:f0:08:9d:9e:92:76:c3:41:cc:fa

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.dotdigital.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dotdigital.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dotdigital.com
dotdigital.co.uk
dotmailer.com
dotmailer.co.uk
*.dotmailer.co.uk
*.dotmailer.com
*.dotdigital.co.uk
dotdigital.com

Other certificates including the domain name dotdigital.com

(limited to 100 certificates)
systemstatus.rrc.ca
status.hpiinc.com
*.dotdigital.com
servicestation.dotdigital.com
dynco-cpaas.staging.dotdigital.com
r2-login.dotdigital.com
status.digitary.net
developer.dotdigital.com
r1-app.dotdigital.com
cc3.status.jasper.com
r1-login.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
customersuccess.dotdigital.com
developer-cpaas.dotdigital.com
jose.dotdigital.com
*.dotdigital.com
endpointprotection.status.symantec.com
r3-login-stg.dotdigital.com
statusp.dotdigital.com
integrations.dotdigital.com
stg.dotdigitalstatus.com
status.atera.com
dotdigital.com
learning.dotdigital.com
www.dotdigital.com
statuspage.vantage.online
r3-login.dotdigital.com
docs.cpaas.dotdigital.com
customisations-cpaas.staging.dotdigital.com
developer.dotdigital.com
status.addresscloud.com
cc3.status.jasper.com
r1-login.dotdigital.com
cc3.status.jasper.com
apps-cpaas.staging.dotdigital.com
dotdigital.com
systemstatus.rrc.ca
apps-cpaas.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
email.dotdigital.com
*.thor.dotdigital.com
dynco-cpaas.staging.dotdigital.com
dynco-cpaas.dotdigital.com
r3-login.dotdigital.com
apps-cpaas.staging.dotdigital.com
apps-cpaas.staging.dotdigital.com
status.addresscloud.com
r3-app-stg.dotdigital.com
marketing.dotdigital.com
r2-app.dotdigital.com
cc3.status.jasper.com
docs.cpaas.dotdigital.com
developer.dotdigital.com
cc3.status.jasper.com
endpointprotection.status.symantec.com
r1-login-stg.dotdigital.com
r1-admin.dotdigital.com
apps-cpaas.staging.dotdigital.com
cc3.status.jasper.com
status.ssactivewear.com
cc3.status.jasper.com
status.addresscloud.com
developer.dotdigital.com
r1-app.dotdigital.com
status.reliancenetwork.com
status.crewbuilder.ca
endpointprotection.status.symantec.com
r2-admin.dotdigital.com
support.dotdigital.com
email.dotdigital.com
r3-app.dotdigital.com
caloes-status.ravemobilesafety.com
status.c9cg.com
*.dotdigital.com
status-uk.highq.com
r1-admin.dotdigital.com
developer.dotdigital.com
apps-cpaas.staging.dotdigital.com
tickets.dotdigital.com
status.ssactivewear.com
learning.dotdigital.com
servicestation.dotdigital.com
marketing.dotdigital.com
menustatus.omnivore.io
dotdigital.com
mad-test.staging.dotdigital.com
systemstatus.rrc.ca
r3-app.dotdigital.com
r2-admin.dotdigital.com
status.crewbuilder.ca
dotdigital.com
status-uk.highq.com
status-uk.highq.com
login.dotdigital.com
login.dotdigital.com
status.reliancenetwork.com
status.atera.com
stg.dotdigitalstatus.com

Certificate

The complete raw certificate details for *.dotdigital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17702011011725060008649052936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-18 12:54:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 12:54:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOTDIGITAL GROUP PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dotdigital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891026822587565173100117136388322520083374648541626799130936348571088712614923629476973587550147973566440479715763127157509612526659940611195998765503363276788177820026717734122453236739879109152103400279237499334465820851710614340819923906054972645828935651512728887748405844938547530158845957957500461673771464124833632573294618906767592748804857578166194778263520779851495978434749229358964599643053497546682090488072366600040493056320412324583132714877024018995437640265246602392911426662484139973470361506937313792200476616309930980434353897445640468830844030123237697858330587238071118394603330985640418067620113851910509167190126734438705307917430991958975713099058166020898726046824080414763761387854684536975029780246258549677686588046095796530034387417242851248906352864007191561749113546818432356411142744039435779664959130478028167524112042576861247277500481321454210835880504305831218924877739286303216403435104142369039104557746457912853465584215348834244778952565157962546940730459809171359956329776143352057765156004537624958535809915250362115213236506025437142545885083160896844236365688871323156853797174143222524930979792267486918726851993764175403654538038799140162509156893277104186800614805330579734148297302619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmailer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmailer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45956018dc2e09c860ef080884018eec4cc75567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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