www.mci-group.com

- MCI Group Holding SA -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:d2:a9:28:67:40:1d:de:38:a8:85:21:86:ea:7f:94 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MCI Group Holding SA

Organization: MCI Group Holding SA
State / Province: Genève
Locality: Satigny
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d2:a9:28:67:40:1d:de:38:a8:85:21:86:ea:7f:94
Serial Number (int): 10398409239090710927134929848644566932
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bd:bd:15:ad:7f:99:d0:02:9e:38:a1:44:97:85:70:92:58:d3:99:79
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 9d:e3:ff:59:1b:3f:7d:83:77:0a:b5:a1:0f:d9:d8:ef:66:53:98:4a
Fingerprint (sha256): 0a:a2:83:98:5e:71:b1:ad:72:ee:93:82:51:44:44:45:68:e3:ac:de:be:15:32:5f:04:b4:e6:30:dd:fe:26:e0

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.mci-group.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mci-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mci-group.com
mci-group.com
mci-zuerich.ch
www.mci-zuerich.ch

Other certificates including the domain name mci-group.com

(limited to 100 certificates)
b-com.mci-group.com
teams-sbc.mci-group.com
vita.mci-group.com
appli-expenses-staging.mci-group.com
www.mci-group.com
vita.mci-group.com
www.mci-group.com
supporttest.mci-group.com
lync.mci-group.com
*.mci-group.com
aedubsbc001p.mci-group.com
www.mci-group.com
www.scandinavia.mci-group.com
www.mci-group.com
*.mci-group.com
support.mci-group.com
lync.mci-group.com
cvs.mci-group.com
remote.mci-group.com
simone-preprod.coccinet.eu
citrix.mci-group.com
b-com.mci-group.com
*.mci-group.com
supporttest.mci-group.com
supporttest.mci-group.com
www.mci-group.com
www.mci-group.com
careers.mci-group.com
lync.mci-group.com
association.mci-group.com
skype.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
association.mci-group.com
association.mci-group.com
b-com.mci-group.com
www.mci-group.com
b-com.mci-group.com
registration.mci-group.com
reghk.mci-group.com
vita.mci-group.com
www.mci-group.com
comms.mci-group.com
skype.mci-group.com
skype.mci-group.com
images.mci-group.com
skype.mci-group.com
*.mci-group.com
reghk.mci-group.com
images.mci-group.com
reghk.mci-group.com
sip.mci-group.com
www.mci-group.com
association.mci-group.com
vita.mci-group.com
careers.mci-group.com
b-com.mci-group.com
appli-expenses-staging.mci-group.com
supportdev.mci-group.com
www.mci-group.com
B-COM.NOVARTIS.NGIT.CH
skype.mci-group.com
b-com.mci-group.com
comms.mci-group.com
*.mci-group.com
cvs.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
fs.mci-group.com
remote.mci-group.com
citrix.mci-group.com
support.mci-group.com
support.mci-group.com
*.mci-group.com
b-com.mci-group.com
images.mci-group.com

Certificate

The complete raw certificate details for www.mci-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9pdtmmMBPyFWi+lsX0G
amyATqhgQeVIjxMJTyk1vEH+LtUf9gwlEPp5zZFA44+XbZLbCr6TbQwDYCptPRfa
tLYXkgpuip6D0g276/8glv9iAlaX9WTX7U2fc/trxYL+hvRkqsjKUa/ox9LwzLfj
xAM4xawjBLRgDVeVOL6W45rsdqMfc1tmRjcRfctGy5gXKdEVCVJTmtZ/jvsnmGNe
ckGPgXgenzDbXcPGHvE8njGmi8zVn6Nm3QBqCJd3EEhcGDw22lqo9A18kE5vMdGf
U4XzHZPGKvK47DE50puEfSY2heD3zDJcPvv2CaFB6CsYYpIaP4wrgJX9pMadtBoD
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10398409239090710927134929848644566932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Satigny'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MCI Group Holding SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mci-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19169664369649658572048493923377173987925081901710781356620871856910106770265867256457655089929258545691823286465758879108504401015261210091116523935639601969072803837711478422658349315495861366615977109763015103417640989200523908207585255135352460441173007026653565972818959767332539231089684749015673673342943306562630554774394238680523908859158091493509811455741036842179351782479779988527550290349224377347002878948554828467214585670092889450246334516022617620110006641510293963640324819319990825249768563986527389289057763539142593460893180242159191960300434126930121069536014038728911537369266233419745407402903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdbd15ad7f99d0029e38a1449785709258d39979
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mci-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mci-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mci-zuerich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mci-zuerich.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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