vpn2-ap-southeast-2.granicus.com

Issued by GoGetSSL RSA DV CA

About this certificate

This digital certificate with serial number 32:e5:32:9e:7b:5f:a0:53:20:e5:11:ac:02:0a:d7:f8 was issued on by GoGetSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn2-ap-southeast-2.granicus.com

GoGetSSL

Organization: GoGetSSL
Locality: Riga
Country: LV

This certificate has expire since

Certificate Details

Serial Number (hex): 32:e5:32:9e:7b:5f:a0:53:20:e5:11:ac:02:0a:d7:f8
Serial Number (int): 67651462446562390282386544511135963128
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c6:0c:fd:f1:1d:1c:d0:c4:6d:ca:7a:cf:0a:23:8e:de:ba:79:05:c1
AuthorityKeyId: f9:fb:50:c4:8b:67:bb:67:64:fe:83:21:a6:a9:ce:3f:55:84:93:99

Fingerprint (sha1): 66:06:f3:57:6d:69:f0:eb:13:53:23:f2:26:43:73:66:be:60:22:c5
Fingerprint (sha256): 0b:f3:e8:b5:95:0b:e5:2e:be:24:1f:8b:7a:27:2f:30:e9:b8:6e:27:49:ac:78:e8:2f:8d:a9:5d:4a:91:61:a1

Issuing Certificate URL: http://crt.usertrust.com/GoGetSSLRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GoGetSSLRSADVCA.crl

Check the revocation status for certificate vpn2-ap-southeast-2.granicus.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn2-ap-southeast-2.granicus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn2-ap-southeast-2.granicus.com
www.vpn2-ap-southeast-2.granicus.com

Other certificates including the domain name granicus.com

(limited to 100 certificates)
eu1-status.mulesoft.com
jira-stage.granicus.com
5718998062727168-fe2.pantheonsite.io
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
*.ca.granicus.com
5718998062727168-fe2.pantheonsite.io
int.granicus.com
eu1-status.mulesoft.com
eu1-status.mulesoft.com
*.granicus.com
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
eu1-status.mulesoft.com
granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
support.granicus.com
corphelpdesk.granicus.com
vpn-prod.granicus.com
5645056174194688-fe3.pantheonsite.io
*.ca.granicus.com
*.granicus.com
*.dev.granicus.com
go.granicus.com
about.govdelivery.com
vpn2-ap-southeast-2.granicus.com
5645056174194688-fe3.pantheonsite.io
jira-stage.granicus.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
secure01.lithium.com
go.granicus.com
eu1-status.mulesoft.com
5718998062727168-fe2.pantheonsite.io
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
info.granicus.com
www.granicus.com
san-1-s12.tlsprovisioning.exacttarget.com
secure01.lithium.com
5714142736416768-fe4.pantheonsite.io
click.granicus.com
istatus.edgenuity.net
*.granicus.com
secure02.stage.lithium.com
int.granicus.com
secure01.lithium.com
san-1-s12.tlsprovisioning.exacttarget.com
*.ca.granicus.com
secure01.lithium.com
view.ceros.com
ceros.map.fastly.net
view.ceros.com
5718998062727168-fe2.pantheonsite.io
eu1-status.mulesoft.com
secure02.stage.lithium.com
secure01.lithium.com
2fsupport.govdelivery.com
5645056174194688-fe3.pantheonsite.io
vpn2-eu-west-2.granicus.com
secure01.lithium.com
eu1-status.mulesoft.com
ceros.map.fastly.net
5714142736416768-fe4.pantheonsite.io
image.20210419.test1.s12.et.yellsatcloud.com
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
govdelivery.co.uk
secure02.stage.lithium.com
ceros.map.fastly.net
secure01.lithium.com
eu1-status.mulesoft.com
secure02.stage.lithium.com
eu1-status.mulesoft.com
istatus.edgenuity.net
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
secure02.stage.lithium.com
5714142736416768-fe4.pantheonsite.io
secure01.lithium.com
5690091590647808-fe2.pantheonsite.io
eu1-status.mulesoft.com
5690091590647808-fe2.pantheonsite.io
secure02.stage.lithium.com
ceros.map.fastly.net
eu1-status.mulesoft.com
view.ceros.com
secure01.lithium.com
eu1-status.mulesoft.com
5645056174194688-fe3.pantheonsite.io
eu1-status.mulesoft.com
5714142736416768-fe4.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5718998062727168-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io

Certificate

The complete raw certificate details for vpn2-ap-southeast-2.granicus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0eASjanCGwnLS/QVxRg
b0KyPsEoopF37PBDJerZdVORtiLGw9MepP3b0g7PslfS6/TMbVrNO/MH7WnwgIXk
dBH3Jt4KvjUNFqoVdxsdvEHJGpIZ1RNMVyL4zARb1n5pJ2U5hp1SsKTYWDFwDLz9
qEeDm2FJ4//2iX+LKlBkJvOGwMfivvD33osgGtcQX9YssSjUqHOdWJ7NsdRyDwQ/
VrXcwBXJd54jmYIS+Gk/3UckKbR/wYPQDc3DdUJ1z5yeJy6n9Y9aYuQmiMv2/7pz
w4dRCkGgCabClXTeCjrOaXW/1zvoXUi2xbsNhyJ9580O+r61HsMisWH8IxAN02Tq
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67651462446562390282386544511135963128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riga'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoGetSSL RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn2-ap-southeast-2.granicus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25661634430603380924548194286985762426443714535611662277482895110970521561003241921035540457211792648611668805256738790159359503475246109521855393574624765086150759336768150241461466616368981335784725571183382227321510047531986139450080315164550578596712093043074089043694674158167835344227299130611673589285904027797262801676921612697964314182882583205156378181899182918165587980620096530897664340104017872339494445646016517556560110409066450974408445019320123797238970985138524068406585503520544914890616859987244286153522538091068408128270850153408161604999427207428021888734129841457180178862172894124996403980891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f9fb50c48b67bb6764fe8321a6a9ce3f55849399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c60cfdf11d1cd0c46dca7acf0a238edeba7905c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.64
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GoGetSSLRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GoGetSSLRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2-ap-southeast-2.granicus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpn2-ap-southeast-2.granicus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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