greaterpalmsprings.vrbo.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:54:75:5d:82:0a:42:5d:56:cb:c1:7d:1e:75:26:cb was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=greaterpalmsprings.vrbo.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:54:75:5d:82:0a:42:5d:56:cb:c1:7d:1e:75:26:cb
Serial Number (int): 9743129356999531636106587869805881035
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 41:ec:19:e0:36:d6:23:31:37:7c:6e:dc:f0:41:ee:34:37:2b:5d:4a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 9b:a0:7d:ac:48:fd:f2:6c:41:11:8c:bb:6e:69:96:95:81:ab:2c:10
Fingerprint (sha256): 0d:a2:0f:a2:d8:4b:82:fd:9d:ea:ae:8e:04:48:5a:13:08:0f:31:2d:a2:34:17:fb:0e:50:1e:69:a8:6a:bf:c0

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate greaterpalmsprings.vrbo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greaterpalmsprings.vrbo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greaterpalmsprings.vrbo.com

Other certificates including the domain name vrbo.com

(limited to 100 certificates)
dns-vetting1c.map.fastly.net
incapsula.com
homeaway.com
*.homeaway.com
admin.vrbo.com
g2.shared.global.fastly.net
click.eg.vrbo.com
homeaway.com
view.eg.vrbo.com
e2.shared.global.fastly.net
failover-stage.vrbo.com
e2.shared.global.fastly.net
Expedia, Inc.
gp1.wac.edgecastcdn.net
homeaway.com
e2.shared.global.fastly.net
g2.shared.global.fastly.net
auth-stage.vrbo.com
g2.shared.global.fastly.net
gp1.wac.edgecastcdn.net
community.vrbo.com
g2.shared.global.fastly.net
gp1.wac.edgecastcdn.net
dns-vetting1c.map.fastly.net
www.westvirginia.vrbo.com
g2.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
e.homeawaycorp.com
homeaway.com
e2.shared.global.fastly.net
g2.shared.global.fastly.net
mi.vrbo.com
dns-vetting1c.map.fastly.net
homeaway.com
incapsula.com
homeaway.com
www.westvirginia.vrbo.com
homeaway.com
em.vrbo.com
edgecastcdn.net
go2.vrbo.com
incapsula.com
www.homeaway.com
edgecastcdn.net
apps.vrbo.com
homeaway.com
stage.vrbo.com
view.eg.vrbo.com
g2.shared.global.fastly.net
traveler.vrbo.com
e2.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
g2.shared.global.fastly.net
goodday.vrbo.com
go2.vrbo.com
auth.vrbo.com
go2.vrbo.com
apps.vrbo.com
images.vrbo.com
g2.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
view.eg.vrbo.com
www.homeaway.com
auth-stage.vrbo.com
partner.vrbo.com
express.us.vrbo.com
greaterpalmsprings.vrbo.com
e2.shared.global.fastly.net
e2.shared.global.fastly.net
imagesus-stage.vrbo.com
www.westvirginia.vrbo.com
imagesus-stage.vrbo.com
gp1.wac.edgecastcdn.net
g2.shared.global.fastly.net
apps.vrbo.com
e2.shared.global.fastly.net
westvirginia.vrbo.com
dns-vetting1c.map.fastly.net
auth-stage.vrbo.com
imagesus-stage.vrbo.com
e2.shared.global.fastly.net
g2.shared.global.fastly.net
www.westvirginia.vrbo.com
g2.shared.global.fastly.net
go2.vrbo.com
incapsula.com
failover-stage.vrbo.com
homeaway.com
g2.shared.global.fastly.net
www.vrbo.com
www.homeaway.com
incapsula.com
express.us.vrbo.com
imagesus-stage.vrbo.com
failover-stage.vrbo.com
incapsula.com
help.homeaway.com

Certificate

The complete raw certificate details for greaterpalmsprings.vrbo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnqEIV1mLkHLOW4YFz3v
uOjiV0rHMzSTL9veWX1G2R9NDDBXfckoeULbqAtyWp1iT+Rad+lV9fpofFnVn3LU
k2X2tERGnwMhw1+zogcS6w6p9rfKjnymN+6CE6Barq6Pa+nbGuVxmLMwMvFSnLFT
DWKSJQhygfVU7DLdo+/3Th7rN0JO7uXXMBTVmIjB8vT4nqlLsdTLqDT4AKvwUidu
k4XcT2J/llBFKQHs0UIhcqEdbmIEVKAFl1o79hhWOKzorkGTuvM2ztJJzB1Z8IPU
Tc0Bv5ZiO96ZPUMbgnmjyiVB8YQwSmCpgb3DW5tiEXPh76NBK7zsu6d1VJ9Mqkdp
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9743129356999531636106587869805881035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greaterpalmsprings.vrbo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22025880021518691706932670862434409704905248388017421064928816143964220586879495142799305896548495028525881886185257997490751973394151414366123329278847513351269302743866377891437601474477504765784663830610421898568890981282980420589736835130024261684194290435289423375610582892439930519964135508925075627236960846960603707934963903760504981940482096723528351910850886912923884430449725420445328759388901984559061997414235452176469801561478956564392914717959086931179173818292184200630807916702585554108371080329229901427717585604992451948689838483136301286133798258894547686643205548269440695645239979001156431473117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41ec19e036d62331377c6edcf041ee34372b5d4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greaterpalmsprings.vrbo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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