fticonsulting.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:b7:4f:00:ef:71:8f:e5:86:da:a1:41:5f:0b:de:96 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fticonsulting.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:b7:4f:00:ef:71:8f:e5:86:da:a1:41:5f:0b:de:96
Serial Number (int): 10256388680069178545657846291923459734
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:32:34:db:ff:57:5a:a9:b7:3d:f4:3c:5d:5b:b8:1b:25:1a:7e:50
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 73:a8:80:e3:18:42:a7:83:70:91:2d:33:ac:f8:ac:62:41:58:46:71
Fingerprint (sha256): 15:76:df:f2:cc:f4:08:be:a5:43:89:20:8f:04:f7:1e:9d:77:82:6f:78:0f:a4:53:e1:5b:cc:2a:73:4b:13:af

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate fticonsulting.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fticonsulting.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fticonsulting.com

Other certificates including the domain name fticonsulting.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
FTIHealthcare.fticonsulting.com
redssl01.fticonsulting.com
preferencecenter.fticonsulting.com
preferencecenter.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
FTIHealthcare.FTIConsulting.com
remotesupport.fticonsulting.com
si-scdev.fticonsulting.com
voltage-pp-0000.fticonsulting.com
ftiatlas.fticonsulting.com
amail.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
si-scqa.fticonsulting.com
remotesupport.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mail.fticonsulting.asia
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mail.fticonsulting.com
fti-folio.fticonsulting.com
tracking.fticonsulting.com
go.fticonsulting.com
sharena.fticonsulting.com
fticonsulting.com
awdev.fticonsulting.com
mailwest.fticonsulting.com
fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mailwest.fticonsulting.com
ecg.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
shareeu.fticonsulting.com
annssl01.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
wsus1.fticonsulting.com
mail.fticonsulting.com
www.passle.net
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
ftishare.fticonsulting.com
azuse2idp01.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
ssluk.fticonsulting.com
docanalytics.fticonsulting.com
maileast.fticonsulting.com
travel.fticonsulting.com
gofti.fticonsulting.com
go.fticonsulting.com
services.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
ashmail.fticonsulting.com
ftiatlas.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
rmail.fticonsulting.com
ftiatlas.fticonsulting.com
cdmobile.fticonsulting.com
FTIHealthcare.FTIConsulting.com
leapfrog-ssl-14.gcs-web.com
ssleast.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
www.passle.net
go.fticonsulting.com
go.fticonsulting.com
ftiatlas.fticonsulting.com
mailwest.fticonsulting.com
voltage-pp-0000.fticonsulting.com
www.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
si-scdev.fticonsulting.com
cdmobile.fticonsulting.com
cms1.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
csa.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
voltage-pp-0000.fticonsulting.com
mail.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
preferencecenter.fticonsulting.com
remotesupport.fticonsulting.com
ftiatlas.fticonsulting.com
maileast.fticonsulting.com
async.fticonsulting.com
ftihealthcare.fticonsulting.com
vidyo.fticonsulting.com
analytics.fticonsulting.com
FTIHealthcare.fticonsulting.com
dr.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
events.fticonsulting.com
remotesupport.fticonsulting.com
maileast.fticonsulting.com

Certificate

The complete raw certificate details for fticonsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2S0DQpY3uyNN4+ovOF
jagi2ZLN27PVL98NBfmBN4hmcSgZG4LrvBSRX2h79khEglIC38IhuCw0AsAAKDHP
DisLDJrMAQ9E0KrJF4F+eK4JZTUjB4cSRVdoAiFCpa/nJKVnf2Z8rNX8TnWA7ifW
Qvo3EK8J3YJvimzvJ6Ty8n/UDfiDzjTr6BKktU2lqncDMmyEaxux+JaRLsID8Kna
GKxniFIZuMKW0Tr7EvaAgXFbiV9ya3MXiiQqvphShnHafxmZ+c6LGMg9uqzGLB9P
K8CsnuFgoTWVJFdB8kZ26U4w3ZWFbRSmNel1kVyjJ14n22DImBFk17UKTMu7/7Lw
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10256388680069178545657846291923459734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fticonsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23873622869751033334443113321479289955159525361579580941285401321972609394160188757674441419133138478446684133099466905235356309444952938121615356030070750139125651323737852322088315423103525048482059725212550504732032071633241140211277325003267402896870602518255834279808309152889224781985827048343680141162061616012020916091929583713056674425476131134161939983112982719746587150282889865993663667263933527077022116064835226969128988803676094506781654871587950358243276365609402796293998212688275944113570542931308574501589795361086041709470717354858370689070251903998809813344405650767252109455860481924584982114521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d63234dbff575aa9b73df43c5d5bb81b251a7e50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fticonsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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