corpaccmgr.j2.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0e:19:a8:08:0b:bd:03:a7:4a:9f:9f:aa:04:b1:d7:8c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corpaccmgr.j2.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:19:a8:08:0b:bd:03:a7:4a:9f:9f:aa:04:b1:d7:8c
Serial Number (int): 18742407444723745847137346759821481868
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:41:e0:48:6a:f1:36:2b:51:cf:69:77:18:52:2d:c8:ac:db:98:c0
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 05:ba:26:42:9d:fd:e7:5b:81:64:05:59:2f:dd:af:03:aa:c0:65:1e
Fingerprint (sha256): 13:cd:06:96:68:c3:9c:c5:6b:99:5b:f9:e9:ba:4a:c7:60:e4:9f:63:2d:01:d2:4c:ea:19:31:ec:15:96:30:41

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate corpaccmgr.j2.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corpaccmgr.j2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corpaccmgr.j2.com

Other certificates including the domain name j2.com

(limited to 100 certificates)
*.euw1.fstor.dev.ccs.biz
sassets.j2global.com
images.j2.com
jconnect.j2.com
*.prod.r53.j2.com
sassets.j2global.com
sassets.j2global.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.qa.r53.j2.com
sassets.j2global.com
fir.fstor.int.eu.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
mdi.fstor.eu.j2.com
www.j2.com
livedrive.j2.com
jconnect.j2.com
*.dev.j2send.j2.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.fstor.prod.r53.j2.com
sendapi.j2.com
pages.inquiry.j2.com
pages.inquiry.j2.com
mdi.fstor.eu.j2.com
ads.j2.com
livedrive.j2.com
webmail.j2.com
amp.fstor.eu.j2.com
www.j2.com
www.j2.com
livedrive.j2.com
firimg.fstor.int.eu.dev.j2.com
tfnapp.j2.com
api.mobile.j2.com
corpaccmgr.j2.com
ads.j2.com
devapi.fax.j2.com
*.dev.j2send.j2.com
tracking.inquiry.j2.com
sassets.j2global.com
secure.j2.com
firimg.fstor.int.eu.dev.j2.com
dsv.dev.j2send.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
amp.fstor.eu.dev.j2.com
fproxy.fstor.int.eu.j2.com
sassets.j2global.com
*.cloudrast.ca.j2.com
*.prod.ccs.biz
qaapi.mobile.j2.com
fproxy.fstor.int.eu.dev.j2.com
sendapi.j2.com
amp.fstor.eu.j2.com
www.j2.com
sendapi.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
sassets.j2global.com
jconnect.j2.com
*.cac1.fstor.prod.r53.j2.com
devapi.mobile.j2.com
fdc.fstor.int.eu.dev.j2.com
api.mobile.j2.com
pages.inquiry.j2.com
jsign.j2.com
*.apse2.fstor.prod.r53.j2.com
fproxy.fstor.int.eu.j2.com
confluence.j2.com
api.fax.j2.com
amp.fstor.eu.j2.com
qaapi.mobile.j2.com
sassets.j2global.com
api.securedocex.test.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
auth-poc.dev.r53.j2.com
fnsproduce.fstor.int.eu.j2.com
fnsconsume.fstor.int.eu.j2.com
sassets.j2global.com
*.dev.ccs.biz
images.j2.com
tracking.inquiry.j2.com
*.prod.r53.j2.com
jsign.test.j2.com
sassets.j2global.com
*.fstor.dev.r53.j2.com
fmf.fstor.int.eu.dev.j2.com
j2global.com
tfnapp.j2.com
qaapi.mobile.j2.com
images.j2.com
*.dev.ccs.biz
fproxy.fstor.int.eu.j2.com
amp.fstor.eu.stage.j2.com
qaapi.mobile.j2.com
api.mobile.j2.com
fts.fstor.int.eu.test.j2.com
webdial.j2.com
j2global.com

Certificate

The complete raw certificate details for corpaccmgr.j2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0BX1vsxeT8/8vta9u6Y
TIGTmWfU6SW3NSI+8POg9mEmr6ut0EBOMLaASIESwgPX3jYiQdHibjDS7qkorCo1
zNNi4+OpZBeC5bskN3DFKM/SSh1I/d+ZCs0SD1acGniAsmHjjmGohPCuUUtpHEnC
/qzhk26+Tux+boXW2znaj73ohvsdkNq11cbvNbZpYSfgN7KnwQoMRJk3Y5oZ9Xok
HPvqCJNmmYL4EAarwfXhndlV3nIHjYrgyww/vRbhBTSIoZXraMLg/oFoNBpIuY8c
6xhqbBMZNtA0+YE2ziNXJ9Y+kJSOV8G8+joxwK/dMTNwg1JGoKxpk9rfu4jnuXmu
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18742407444723745847137346759821481868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corpaccmgr.j2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26163057905017110095797533613198632952492921971003684309888167423310701138617825211393496825311704573502865288311314540832920167248473246863763687084939457307448969671878159264434575020594921849933208549780072210877819123834254321509077545905808540711834843821778778547157999026010101548814525768632511494037560719832952059087571884948137741906815346447129058566843247516793976202098367202688086392085279421700298698463883589507585775750033936343414695560802850858469309972268581364944253946580674363425968678215129649589172708866983506133648390439134308620498188826635771616113882613937188399181927459370905596702461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2141e0486af1362b51cf697718522dc8acdb98c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpaccmgr.j2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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