mediacenter.grandvision.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:49:7e:32:61:36:d0:a5:44:2f:19:e3:a6:1c:b8:b4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediacenter.grandvision.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:7e:32:61:36:d0:a5:44:2f:19:e3:a6:1c:b8:b4
Serial Number (int): 4369281233132289107068489317771688116
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 19:02:1e:b7:b5:44:67:a4:d8:77:56:27:79:d8:03:b2:d0:69:32:dc
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 27:b7:e6:41:4d:63:2c:43:83:c8:67:bf:4a:73:27:ad:a5:70:cd:cb
Fingerprint (sha256): 0c:ab:ca:b2:05:bf:76:1d:ea:7e:06:27:ed:4a:d2:71:c2:c5:7a:2d:c6:ee:97:ef:e0:2b:e6:d9:b7:3d:23:4d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate mediacenter.grandvision.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediacenter.grandvision.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediacenter.grandvision.com

Other certificates including the domain name grandvision.com

(limited to 100 certificates)
cert00091-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
api-acceptance.grandvision.com
cert00091-azurecdn.akamaized.net
gvacademy.grandvision.com
cert00091-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00049-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
grandvision.com
cert00031-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
pagos.persat.io
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
vpn.grandvision.com
cert00042-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
wd1.grandvision.com
mediacenter.grandvision.com
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00049-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00049-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
webmail.grandvision.com
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
academy.grandvision.com
cert00042-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00042-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cert00009-azurecdn.akamaized.net

Certificate

The complete raw certificate details for mediacenter.grandvision.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39EcwFADEZbTaUvYIeDg
uf8sUsPj/K1w1xQQ8nlA+gbhKxJz8LEr60o+Tj7JQxZLHbA4DTabPDPQri5v2vfa
h0v09KupfWMkLli3AUiEWEmCZGDFh+0q+Lb62r5Gfyr6h0mwFhCtl5vHcZPFm2HE
MbjtChwRsJZrM0It5ONpMOM3dT9wIULgeYflWm8d3x1w2aqBX6VQ34gf3k33LVDB
vwtYZUDHz4OEjB0vcmEf9XlOJz7oK7h3Ch1Yh32DE0bJDRooz4B8ywVrdiswG1gP
K7kVbuGLclqXaKK6p6AQHxqNKNyJEg5tHNT5F1BpaNb3OR5mhhZXxSXMNBTV84v1
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4369281233132289107068489317771688116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediacenter.grandvision.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28254259130451921737860862737534939769118942117059401996673583763523881033166343518177827060251552288950929290707288334888032465202967809981570917385778064315998814919563727793942794470646030121901729921701168747549089373104075212940954139812525653102055170189199467951671501483608835066822508044620952273993359766543067769356228349987615785966416580138776413319708653010124584735601023842469452729280930592564583686858627058292947660255211410137337177421412891688480999285503507197804611623471421618110832590553259499975839196862175886902239530103046141636606329652169600795248024606266231522463640399130158493857257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19021eb7b54467a4d877562779d803b2d06932dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacenter.grandvision.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a39e500f79d7acf353c761818df045cfa9c90d0cbfb818d842ef0919afbdd9173bd7244b2a08e11621e292647e3019dedf80b16d95d4c6772d08f32b0118202b1cc218aeae9fdcc48c6d58fb46f81e47f0026eb8a17f37a1599302759e25f89e9fbd6c33f8deaf261acbd769b6334a10c854534acb46129d2feb22bb40b74c64e63c1f810707932a4aa9fc14103178998108c76a53830f496937e67f73b9c6330b45d605598c99b7533b13c7c11d1c56498b9560875a85feef91c7901d785e6a2af7e67f5b4a21e689c2463f5add14ea51d529b35aa43c1087d9e11bbcd9e638c627eaf156f67db84884105ead7ea46b0ecc84e4aedc8f7b616a237e1fd37ceb