connect.barracuda.com

- Barracuda Networks, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:8f:c1:9e:f5:4c:20:06:f0:ca:5c:69:64:75:76:47 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barracuda Networks, Inc.

Organization: Barracuda Networks, Inc.
Organization unit: IT
State / Province: California
Locality: Campbell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:8f:c1:9e:f5:4c:20:06:f0:ca:5c:69:64:75:76:47
Serial Number (int): 16697161499208509864161659345763137095
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 72:d8:c8:12:43:13:58:97:a8:0f:69:32:a4:81:7c:64:79:a7:8a:fa
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 52:4c:e0:26:fe:b7:b7:33:9c:90:7d:e3:57:5c:3c:a9:70:9b:7a:3e
Fingerprint (sha256): 15:d2:a8:12:6f:34:28:22:63:a2:a0:80:80:86:ea:9a:fd:a9:03:63:49:8f:24:72:06:3c:bb:bf:20:7d:a1:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate connect.barracuda.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.barracuda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.barracuda.com

Other certificates including the domain name barracuda.com

(limited to 100 certificates)
netsecfeedback.barracuda.com
api.backup.barracuda.com
us.access.barracuda.com
blog.barracuda.com
statuspage.io
chickentreat.craveable.support
stage.barracuda.com
chickentreat.craveable.support
chickentreat.craveable.support
ess.cd1.barracudanetworks.com
chickentreat.craveable.support
bsf03.barracuda.com
encrypt.barracudanetworks.com
statuspage.io
statuspage.io
statuspage.io
azurecgw.barracuda.com
statuspage.io
dev.access.barracuda.com
cudaeye.barracuda.com
*.us.access.barracuda.com
downloads.access.barracuda.com
*.barracuda.com
statuspage.io
backfeed.barracuda.com
statuspage.io
collabora.aks.datainspector.barracuda.com
assets.barracuda.com
statuspage.io
content.barracuda.com
waas.barracudanetworks.com
sslvpn.barracuda.com
us.access.barracuda.com
statuspage.io
login.beta.barracudanetworks.com
hq.barracuda.com
ess.cd1.barracudanetworks.com
www.barracuda.com
statuspage.io
sni.cloudflaressl.com
ess.cd1.barracudanetworks.com
azurewaf.barracuda.com
www.barracuda.com
statuspage.io
chickentreat.craveable.support
insiders.barracuda.com
*.eu.access.barracuda.com
statuspage.io
ops.barracuda.com
statuspage.io
dev.access.barracuda.com
content.barracuda.com
statuspage.io
fr.blog.barracuda.com
ess.de.barracudanetworks.com
billing.barracudanetworks.com
*.ess.ca.barracuda.com
dev.access.barracuda.com
url.access.barracuda.com
statuspage.io
connect.barracuda.com
staging1.blog.barracuda.com
analytics.us.access.barracuda.com
statuspage.io
statuspage.io
statuspage.io
chickentreat.craveable.support
prometheus.aks.datainspector.barracuda.com
ngfirewall.barracuda.com
statuspage.io
bu.barracuda.com
netsecfeedback.barracuda.com
ess.vt2.barracudanetworks.com
csg.barracuda.com
chickentreat.craveable.support
collabora.aks.datainspector.barracuda.com
statuspage.io
community.barracuda.com
*.bmb.barracuda.com
docs.access.barracuda.com
api.dev.access.barracuda.com
webgateway.barracuda.com
azureccb.barracuda.com
qa-corp.barracuda.com
connect.barracuda.com
chickentreat.craveable.support
statuspage.io
statuspage.io
stg.access.barracuda.com
chickentreat.craveable.support
content.barracuda.com
statuspage.io
statuspage.io
portal.production-blue.cse-cudasvc.com
login.barracuda.com
statuspage.io
ess.cd1.barracudanetworks.com
*.ess.barracuda.com
analytics.us.access.barracuda.com
ess.cd1.barracudanetworks.com

Certificate

The complete raw certificate details for connect.barracuda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16697161499208509864161659345763137095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Campbell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barracuda Networks, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.barracuda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774239308274683495427026087254619578849638111966706561273390909438974018571506517091059436450780366561192707646032026538640831175852892334634136287409188687000544550888885297790569016252955662369728053923484788156607978016712076566519590566786544004141207722462551918203488444448821040838893105397903892781796761554684612392284996539930633217943784537714349355177159720244446737420252206801240892669891441505989900653706113169100425326247949740510511359627366067595690672540258719956763357822393945575623961481639089946897083035563139624362418869255952828494361852219641013072768966414979774341193404757001143015734411822619369630403549713490254493190758854547222417474191873964587052013206568565533209239069462152644741737187459180534666120672233707975774558511004583579231103038948243410420766662535968019163053227363270077238797868167387108931306860210539352839430254769412092001660785441043567106996605134287698660419003134950334232749187298171893398437134650394460311345504137830650037762198624951660148656023717914022143207817091972970842615558262171523430931343044105155639932449859998182521765635761570685583263167092349919403092341550422609141537362634366373075768843153389652448609576147087575439999642518757035128709064779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72d8c81243135897a80f6932a4817c6479a78afa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.barracuda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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