mydevices.bcg.com

- The Boston Consulting Group -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:4c:c4:00:06:9f:99:fd:ca:f8:0f:45:73:9b:c8:6c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Boston Consulting Group

Organization: The Boston Consulting Group
Organization unit: Global Service
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:4c:c4:00:06:9f:99:fd:ca:f8:0f:45:73:9b:c8:6c
Serial Number (int): 3057045907150650840949408239047133292
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ec:5d:f4:eb:92:a2:7f:fc:55:f4:59:a0:40:8f:79:d0:2b:5e:56:70
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 28:81:4c:e8:08:dd:6b:98:d4:35:11:77:1b:42:0f:49:1d:26:aa:e2
Fingerprint (sha256): 07:a0:c4:7f:10:62:f8:c0:3b:c2:58:7d:fc:18:82:7c:37:d8:2b:4f:56:b1:a2:a3:57:81:6a:90:67:0e:fa:7c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate mydevices.bcg.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mydevices.bcg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mydevices.bcg.com

Other certificates including the domain name bcg.com

(limited to 100 certificates)
warchest-dev.bcg.com
signal.bcg.com
unsubscribe.bcg.com
internalmicrosites.bcg.com
tableau-15303-11.bcg.com
github-pages-webhook.github.gamma.bcg.com
clsnswtreasuryservice.bcg.com
tableau-305124-10.bcg.com
imd.bcg.com
ASP-GAMMA-SnA-Showcases.bcg.com
PSGBackOfficeDev.bcg.com
admin.staging.rover.io
stglab.bcg.com
meridian.stage.bcg.com
track.connect.bcg.com
gmd.bcg.com
teamsites-amr.bcg.com
tableau-298892-02.bcg.com
talent.bcg.com
remoteadmin.bcg.com
tracking.connect.bcg.com
fsgservice.bcg.com
www.jss.bcg.com
swptrial3.bcg.com
cfs.bcg.com
keystone2bcg.bcg.com
qliksensepoc.bcg.com
pdo.bcg.com
tableau-143243-72.bcg.com
digitalprocurement.bcg.com
sdcssl1.bcg.com
dvassets.bcg.com
eis.bcg.com
lukoil-komi.bcg.com
ombudsman.bcg.com
elections.bcg.com
eiumif.bcg.com
dartdev.bcg.com
nwc.bcg.com
juniper.enterprise.bcg.com
pdcvendor01.bcg.com
PSGAPIDev.bcg.com
orgcls.bcg.com
tableauha.bcg.com
tableau-15316-31test.bcg.com
internalmicrosites.bcg.com
www.gs-pwm.survey.bcg.com
stglab.bcg.com
production.smp.bcg.com
edcssl6.bcg.com
sandbox.egnyte.bcg.com
clscontent-tst.bcg.com
mpoint.bcg.com
onebenchmark.bcg.com
bcg-com-dev3.bcg.com
talent.bcg.com
leanmanagementtool.bcg.com
*.bcg.com
digitalclsservice.bcg.com
digitalcls.bcg.com
vote.bcg.com
bcgplatform-eur2.bcg.com
mycases-qa2.bcg.com
saasexcellence.bcg.com
containershipping.bcg.com
dai.bcg.com
gmd-internal.bcg.com
wwad.bcg.com
appsqa.bcg.com
esfbenchmarking.bcg.com
sinequa-prod.bcg.com
adcelapptv01L.bcg.com
sendsms.cc
partnerfeedbackdev.bcg.com
benchmarking.bcg.com
demo.mystudy.fit
tableau-horizonportal.bcg.com
track.connect.bcg.com
learningsims.bcg.com
wspexternal.bcg.com
minerva-dev.bcg.com
www.bcg.com
payablesapprovalprod-new.bcg.com
ivq.bcg.com
tableau-178780-45.bcg.com
CloudManager-staging.gamma.bcg.com
www.bcg.com
bcgplatform-amr.bcg.com
*.dsoautomation.net
tableau-261229-26.bcg.com
gdcssl1.bcg.com
covid-19.gamma.bcg.com
knowledgeanalytics-dev.bcg.com
adcvendor01.bcg.com
AMRMDCRMDYAPP2W.bcg.com
survey.bcg.com
owl.bcg.com
remoteatscale.bcg.com
mydevices.bcg.com
retail360.bcg.com

Certificate

The complete raw certificate details for mydevices.bcg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbC/ChDYHLJ1uZdQOJpE
FN8Ohnj3pBumA8goAVyrYVnBTe/UNrAUV4XBKx5era2nOqoAnr9bI4Raz8BH6iXE
49pddiCYhh8m0XxzLwl4kKr1Vww5bsoqUgNGKpBOzUa8aE2HUjbUqs8JeqOY6rHn
gjMpGMh6Izd02cwP824A7F/uKedLcwUgdgIXcejBWw8n0lsTWqYUl31nXsfFAMv0
iQzPSEnnO09OYsP1HXG8ZQh7B5FhKA1ON2YH65fAOR/S2/GJfUfnsr7XC+cDq1o5
UNK+yPLgT+aJf9C3E1kFKm+2nSp8sHWjSs16F/bguG6PBsWTtTK8lYVrs8TcU59t
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3057045907150650840949408239047133292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Boston Consulting Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mydevices.bcg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21926383582071700192101567707456235983279182582821848049528859126288746551080320868803466243270840222787613393277480102144802201220561150954602240901198932755559309334997377996496047380401084385320819022502083695049158876241054660839146916388215559953377883558341365742460801766401032019572145283628719501405314896793069906412465334881342052468898252935407410981853977195813508353011515524282458530251465446058044073547312971223375276078186876136502483397328946772563680750721810163464139858215335558427583242012018284370193479498069846313320755566000819423852475821210006712126961805458826927959735184067294696271279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec5df4eb92a27ffc55f459a0408f79d02b5e5670
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydevices.bcg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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