secure.neostaging.tagify.diageo.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0e:81:78 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=kUAQiPgxT8yWJaCsVnySm4gOwU6W2xOB,CN=secure.neostaging.tagify.diageo.com,OU=GT62127796+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:81:78
Serial Number (int): 950648
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 6d:5d:8d:d1:e1:1a:d7:6a:25:5a:20:df:bb:6a:12:9c:b1:87:c6:8a
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 1c:22:69:fa:88:3e:28:1c:e7:37:2d:64:2a:5c:40:41:f1:60:34:53
Fingerprint (sha256): 07:a5:8d:29:be:27:9a:15:63:0d:25:a4:82:97:98:c8:d3:b3:55:b6:76:12:ba:01:b0:46:25:89:9e:3a:a5:ce

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate secure.neostaging.tagify.diageo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.neostaging.tagify.diageo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.neostaging.tagify.diageo.com

Other certificates including the domain name diageo.com

(limited to 100 certificates)
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
okta-iwa.diageo.com
www.diageo.com
focalpoint.diageo.com
dvds-hkg.diageo.com
www.diageohorizon.com
dou01v01.diageo.com
www.diageo.com
www.diageo.com
www.diageohorizon.com
secure.neostaging.tagify.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portal.diageo.com
www.diageohorizon.com
diageo-expcluster-e01-sin1.diageo.com
sps-emea.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
dvds-bil.diageo.com
dvds-hkg.diageo.com
remoteaccess-emea.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
diageo-expcluster-c01-ams1.diageo.net
www.diageohorizon.com
www.diageo.com
www.diageo.com
diageo-expcluster-e01-lon1.diageo.com
portal.diageo.com
www.diageo.com
www.diageohorizon.com
san-12-s50.tlsprovisioning.exacttarget.com
okta-iwa.diageo.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
portaltest.diageo.com
hipm.diageo.com
hipm.diageo.com
www.diageo.com
diageo-expcluster-c01-lon1.diageo.net
www.diageohorizon.com
www.diageo.com
hipm.diageo.com
mobilena.diageo.com
webmail.diageo.com
www.diageohorizon.com
dar01v01.diageo.com
diageo-expcluster-e01-hon1.diageo.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
cybercoe.diageo.com
www.diageohorizon.com
www.diageohorizon.com
*.diageo.com
dvds-thw.diageo.com
www.diageohorizon.com
www.diageohorizon.com
pingfed.diageo.com
dvds-bil.diageo.com
neostaging.rrsocial2.diageo.com
api.diageo.com
www.diageohorizon.com
vdi-emea.diageo.com
www.diageohorizon.com
mrasuat.wsnet.diageo.com
www.diageohorizon.com
*.delegows.diageo.com
www.diageohorizon.com
remoteaccess-emea.diageo.com
portaleppscm.diageo.com
focalpoint.diageo.com
www.diageohorizon.com
diageo-expcluster-c01-sin1.diageo.net
diageo-expcluster-e01-ams1.diageo.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
diageoplatform.com
diageo-expcluster-e01-lon1.diageo.com
www.diageo.com
okta-iwa.diageo.com
www.diageohorizon.com
portaltech.diageo.com
portal.diageo.com
diageo-expcluster-e01-ams1.diageo.com
www.diageo.com
tus01v01.diageo.com
portaleppbwa.diageo.com
rsi.diageo.com

Certificate

The complete raw certificate details for secure.neostaging.tagify.diageo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqJesajzq9MYX/jms22E
TecIT/3Hm4O01zdQQ4zsaWK0p9yZT+h1xjGciAKe9KXJ9TNB9r5d3l2xv8N+bTQO
fWHy+m1rCqcmNDzu5axe8tsesc33k/EFNB3DVCvARdTuHPxLio6L7hQALQehHXNK
U0xGJ/f4t0pjy8Z3gEsqNlr2Nh+pr9+PkkP0lAutZm1TXme8y7GSaW+z+x4NMHcQ
Oj2JAb6YGARrjDeD9AzQGXY9vI2/0/toouod7p5cIa+xaMlyjMIBJo+JRNx6jaK2
RukpTqweIjL506w6gTUgwOpfiM73RELL6wtBylr3LBjyQL3Bk7a5mXL1L/fCm0PH
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 950648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-13 03:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-14 14:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kUAQiPgxT8yWJaCsVnySm4gOwU6W2xOB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT62127796'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.neostaging.tagify.diageo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23055439084871476757150133831714096932197660623556486010076190668236591431491961991771905611522840036904171705663826480342628332433379847181179067545392496139526782470658942844311317325642342711658771020710651358701522230998372147620322826818877900924582966534601539293397790910091559066702394274916305076372338083700662414563356529405369093533774373865777327635268548494473256682169617214817569502754980625187811434243932134642220782234148524914249469260606621736017026348662257931200887597064531949893032545177464737803723882104916148379467830193807720373016659317566649590905948843152302179784951655145793233602431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.neostaging.tagify.diageo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d5d8dd1e11ad76a255a20dfbb6a129cb187c68a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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