tvc.ihost.com

- International Business Machines Corporation -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 12:b1:1c:24:aa:cc:fa:1b:63:c7:93:61:2f:4c:55:bb was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

International Business Machines Corporation

Organization: International Business Machines Corporation
State / Province: North Carolina
Locality: Raleigh
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:b1:1c:24:aa:cc:fa:1b:63:c7:93:61:2f:4c:55:bb
Serial Number (int): 24845711280632156596509179637985465787
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 99:05:5b:ed:68:6f:2a:91:5c:33:1f:64:d8:88:6b:d3:52:11:95:ea
Fingerprint (sha256): 06:80:44:4d:40:8a:73:8f:53:ad:f8:60:21:92:ab:4e:7c:34:a3:76:21:76:b1:76:45:6b:c2:1d:5f:92:2f:f6

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate tvc.ihost.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tvc.ihost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tvc.ihost.com

Other certificates including the domain name ihost.com

(limited to 100 certificates)
test.claims.ihost.com
*.jz-dev.ihost.com
dbrmobile.fr2.usf.ihost.com
ipwc-sl.ihost.com
gsc.ihost.com
rtpwebvpn.brsrtp.ihost.com
test-watson2.ihost.com
masdev.monitor.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
ssl.wsc.ihost.com
survey.ihost.com
gsc.ihost.com
ehrkb.ihost.com
impactdev.rny.ihost.com
sldcmwas.gps.ihost.com
ista.ihost.com
www.reporting.ihost.com
smarthelp.ihost.com
www.elearning.jp.ihost.com
p2p.ihost.com
ciscovpn4.tl.ihost.com
p2p.ihost.com
ri3pa340.msd.ihost.com
ips.ihost.com
frfcqcm011ix328.montpellier.mebs.ihost.com
cpd-cp4waiops.apps.ocp-nw.p128.cesc.nca.ihost.com
vpn.bos.tec.ihost.com
*.jz-xit04.ihost.com
webvpna.brsrtp.ihost.com
*.gps.ihost.com
*.edu.ihost.com
maaccelerator.ihost.com
tvc.ihost.com
ista-preprod.ihost.com
aos.us.ihost.com
ista.ihost.com
help.dms.ihost.com
ctmwebbld1.msd.ihost.com
icafmtest.ihost.com
tyco.msd.ihost.com
survey2.ihost.com
impact-enterprise.rny.ihost.com
ips-preprod.ihost.com
axap1ph-web.msd.ihost.com
icafm.ihost.com
jira5.ihost.com
jiratest.ihost.com
chat.smarthelp.ihost.com
div16qp.fairfax.ihost.com
ista.ihost.com
*.edu.ihost.com
bld1vpn.brsbld.ihost.com
sni.cloudflaressl.com
stf1vpn.brsstf.ihost.com
*.cloud.red.ihost.com
ista-preprod.ihost.com
dev-process.vcfclaims.ihost.com
ehrkbpp.ihost.com
iconik-processor.apps.ocp4vam.p159.cesc.nca.ihost.com
watson-genomics.ihost.com
ptest.process.claims.ihost.com
etime.fairfax.ihost.com
*.gpsemea.ihost.com
www.as400lug.ihost.com
*.red.ihost.com
cisco.maaccelerator.ihost.com
etime.fairfax.ihost.com
test.rapid.ihost.com
*.lbps.ihost.com
haglobal-prod.red.ihost.com
*.red.ihost.com
*.edu.ihost.com
icafmdev.ihost.com
rchbcc.rochester.ihost.com
*.edu.ihost.com
vhost0532.dc1.on.ca.compute.ihost.com
masdev.home.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
tracktrace.be.ihost.com
rchbcc.rochester.ihost.com
mbpstoolsdev.ihost.com
fsdctoyz-lab.bet.fiscnet.ihost.com
dadsweb4.uk.ihost.com
asa003b.centers.ihost.com
prod.rapid.ihost.com
w.maaccelerator.ihost.com
citrix.ehr.ihost.com
quickplace.fr2.usf.ihost.com
watson.ihost.com
jira4.ihost.com
clarify.bto.ihost.com
travelexpense.eu.kfi.iers.ihost.com
testimpact.rny.ihost.com
matraining.accelerator.ihost.com
jira.ihost.com
*.tec.ch.usf.ihost.com
sonoco.iers.ihost.com
matraining.accelerator.ihost.com
gnm.sni.ibm.com
aos.us.ihost.com
stats.surfaid.ihost.com
prod.rapid.ihost.com

Certificate

The complete raw certificate details for tvc.ihost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2tq9pTXjxyGh4tkpa8e
U3Z9wu+3RSNtbeov0UmSYv/xUF7z1tlidUNoErvU+fQqwCBXvofwGpWHsP5oC5FH
+unL4DGC7NjYUB6hfvo+MAGSHSsrpE/PyigvXsnBl77g1tebJhlSTXK+lF76XHCd
lEC1A/AojFWQv0qhNv86y5KPhN/GlCdMaNzWClyZC+Nzmrxyl2+A9sBJKJGfAX7B
MMt7L2Wy85XsEP19DVN63vl5CA7QH18B78ctd3z86CqHQ7+BcY86+CIkvK4XwRfF
dBZjuN4iyQ/EHswZZNPUjNB/GdH9oVR1CdbkPzBYyROkXe0B11wozPa6CJ7KoR3z
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24845711280632156596509179637985465787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'International Business Machines Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'tvc.ihost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20124860193335374637918805051546179379055540354109503369728318732930010908830667836237139457206209233836920269573212314177753618903783752936145665176012878740204329541207294283169336539424568747888056722097068615482083589704427142617519123895332206896427895677748883946928702800916453400432173371861344203426922365988085760128316918362514148606200103861010360898565639725862414799245853868387562581245303213244824363632728114861392072956838542447349922734560590843374396349259483047930469030091690485104697602624933238628402645620385489959359329190870389153045622050905704110951845898298382498528301473374097318474497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvc.ihost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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