dealer-emea-api-stage.control4.com

- Control4 Corporation -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:56:1d:bd:53:77:dc:3c:a0:56:23:e6:a9:b6:1a:3d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Control4 Corporation

Organization: Control4 Corporation
Organization unit: IT
State / Province: Utah
Locality: Draper
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:56:1d:bd:53:77:dc:3c:a0:56:23:e6:a9:b6:1a:3d
Serial Number (int): 9751736690161785407472490444498541117
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a2:36:9f:8f:bb:ff:c6:ab:f2:56:da:09:53:74:30:05:d0:8d:48:4c
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 54:88:16:be:80:27:2d:85:ed:d8:a7:0f:07:39:b7:65:80:bb:32:21
Fingerprint (sha256): 07:90:aa:b3:a7:ef:9e:21:a2:e1:5b:e4:0e:7e:43:51:d8:08:d8:4d:42:12:f2:25:fb:94:22:f6:ad:32:67:85

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate dealer-emea-api-stage.control4.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealer-emea-api-stage.control4.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dealer-emea-api-stage.control4.com

Other certificates including the domain name control4.com

(limited to 100 certificates)
helpdesk.control4.com
cwp.status.symantec.com
www.control4.com
maintenance.blackbaud.com
my-beta2.control4.com
multi-test.control4.com
reflector-pqa2.control4.com
maintenance.blackbaud.com
survey.gradwell.com
statuspage.io
statuspage.io
statuspage.io
dealer-beta.control4.com
statuspage.io
maintenance.blackbaud.com
dealer-stage.control4.com
go.control4.com
cwp.status.symantec.com
leapfrog-ssl-14.gcs-web.com
tech.control4.com
dealer-api-dev.control4.com
control4.com
onehub.control4.com
forums.control4.com
navigator.control4.com
my.control4.com
dealer-emea-api-stage.control4.com
remote.control4.com
confluence-test.control4.com
locator.control4.com
services-devint2.control4.com
navigator-beta.control4.com
leapfrog-ssl-14.gcs-web.com
ncauth-dev.control4.com
survey.westernwindowsystems.com
maintenance.blackbaud.com
dealer-stage.control4.com
services-beta2.control4.com
paste.control4.com
dealer-emea.control4.com
confluence.control4.com
supportsurvey.control4.com
update2.control4.com
reflector-pqa.control4.com
dealer-cms.control4.com
support.control4.com
statuspage.io
leapfrog-ssl-14.gcs-web.com
multi-test.control4.com
protrack.control4.com
maintenance.blackbaud.com
tweeterforums.control4.com
statuspage.io
maintenance.blackbaud.com
maintenance.blackbaud.com
driverrelease.control4.com
my-devint.control4.com
rms2.control4.com
statuspage.io
forms-dev.control4.com
cwp.status.symantec.com
forums.control4.com
leapfrog-ssl-14.gcs-web.com
c4forms.control4.com
bugzilla.control4.com
paste.control4.com
statuspage.io
statuspage.io
mail.control4.com
leapfrog-ssl-14.gcs-web.com
rms-pqa2.control4.com
control4.com
honeywell-home.drivers.control4.com
drivers.control4.com
statuspage.io
customer-beta2.control4.com
remote.control4.com
maintenance.blackbaud.com
navigator-pqa.control4.com
statuspage.io
drivers.control4.com
navigator-pqa2.control4.com
maintenance.blackbaud.com
se.control4.com
maintenance.blackbaud.com
dealer-emea-dev.control4.com
statuspage.io
leapfrog-ssl-14.gcs-web.com
services.control4.com
maintenance.blackbaud.com
maintenance.blackbaud.com
sni.cloudflaressl.com
locator.control4.com
maintenance.blackbaud.com
cwp.status.symantec.com
dealer-api-stage.control4.com
dealer.control4.com
rms-beta.control4.com
cody-test.getgetfeedbackback.com
statuspage.io

Certificate

The complete raw certificate details for dealer-emea-api-stage.control4.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKIHhbCVG5Jqa5YhS2RO
CLkiubs/efEl7MG7dsUqbGGn+Ra7d6U0wT44Gcgf5ItqyS4uNwW8XDqTTtj0WAVD
X0wee2wRMivcSWitZUbaXV/M2wDNN0upSu06I/9nA/p997Jn5SqLJ3IrMIoimj5t
7eTa6D4L/Bb1uM7EVDWmWbArBNG4qaWcmP+lUJf49e7IWSaI0YQ3NTXo6qY6P4km
8EZorGfEL1URtsiqufbnQ9EigR7psxzUtTw7gyF5hcdrL1i/ME3pM/LJWFL/OI7i
qkwt4ZdklJPnYl1GX34OanWFCfdVqsj4gj7cyQTjhWfCFW2xh0EcI9N8Pg9EGdkJ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9751736690161785407472490444498541117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Draper'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Control4 Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dealer-emea-api-stage.control4.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19773075241706065976969774863510149644730482424675468458479763091647767962433804793516483661668306304438525162820992859648647678965091902739366128542929525788080501071262783091275235936555787787118670589070407230119837683575229540360820775365152448028566735463671388014837843634537061207887416363625755774474065027617173595932797739196720091171920634346172458705659684102842740638384069151055041655465314793354601601508711727370381161392281361059145905700473638970805468316044040882950187879933458777703563166741877237190339149093588090177806300266520908299803144760644228533057356426409511030942671984177492090489139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2369f8fbbffc6abf256da0953743005d08d484c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer-emea-api-stage.control4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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