*.agilent.appcelerator.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:0b:69:07:a2:4a:09:64:be:cf:a3:1d:51:5c:40:da was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.agilent.appcelerator.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:0b:69:07:a2:4a:09:64:be:cf:a3:1d:51:5c:40:da
Serial Number (int): 8034613497984975828013079861300838618
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 64:33:c0:6a:53:49:76:b9:73:46:b9:80:b9:15:14:87:c7:a4:95:5f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 07:fe:35:51:fc:43:30:ca:2b:d8:d9:37:54:88:24:b1:8d:0e:5b:e5
Fingerprint (sha256): 18:76:36:62:97:2c:94:88:81:c0:e1:4b:6f:36:e9:f6:d6:05:71:9a:98:0b:ee:21:fa:8f:64:e7:c8:59:0e:0e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.agilent.appcelerator.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.agilent.appcelerator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agilent.appcelerator.com
agilent.appcelerator.com

Other certificates including the domain name appcelerator.com

(limited to 100 certificates)
carpepm.almonds.com
5641508757700608-fe2.pantheonsite.io
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
streetfilms.org
*.prod.gulfstream.appcelerator.com
cdn-test.battlefields.org
*.cloudapp-preprod.appcelerator.com
citeak.multidevcom.uaf.edu
5641508757700608-fe2.pantheonsite.io
banking-business-review.com
chns120.courseresource.yale.edu
*.cloudapp-enterprise.appcelerator.com
hub.meed.com
*.prod.ace.appcelerator.com
161511-web1.vilcek.org
live.ucdavis.edu
info-dev.calperformances.org
streetfilms.org
chns168.courseresource.yale.edu
liberalarts.ss.pacific.edu
5641508757700608-fe2.pantheonsite.io
expeditions.sandiegozoo.org
qa.californiasciencecenter.ca.gov
a.ns.christiancentury.org
appcelerator.com
host2.openminds.com
appcelerator.com
m.ajc.org
a.ns.christiancentury.org
live.bme.cornell.edu
2fadmin.govdelivery.com
*.abc.appcelerator.com
agd.nebrwesleyan.edu
labellelab.asu.edu
legacy.hq.philabundance.org
appcelerator.com
*.dev.oneok.appcelerator.com
5641508757700608-fe2.pantheonsite.io
*.dev.abc.appcelerator.com
appcelerator.com
live.ophd.pantheon.berkeley.edu
2fadmin.govdelivery.com
banking-business-review.com
appcelerator.com
161511-web1.vilcek.org
161511-web1.vilcek.org
*.appcelerator.com
*.abc.appcelerator.com
*.dev.tui.appcelerator.com
161511-web1.vilcek.org
*.cloudapp-enterprise.appcelerator.com
*.prod.oneok.appcelerator.com
international.dev.oceana.org
appcelerator.com
*.uat.ace.appcelerator.com
*.dev.gulfstream.appcelerator.com
platform.appcelerator.com
161511-web1.vilcek.org
nartc.fcm.arizona.edu
chns168.courseresource.yale.edu
*.uat.ace.appcelerator.com
junk.dana.org
buyersguide.aaps.org
afscme57.org
cdi.uga.edu
banking-business-review.com
chns168.courseresource.yale.edu
*.agilent.appcelerator.com
161511-web1.vilcek.org
caldesignlab.berkeley.edu
5641508757700608-fe2.pantheonsite.io
*.cloudapp-preprod.appcelerator.com
alldata.com
5641508757700608-fe2.pantheonsite.io
banking-business-review.com
sters.us
liberalarts.ss.pacific.edu
*.prod.gulfstream.appcelerator.com
live.ucdavis.edu
careers.whittier.edu
lp.programs.carey.jhu.edu.help
appcelerator.com
cloudapp-eu.appcelerator.com
chns130.courseresource.yale.edu
5641508757700608-fe2.pantheonsite.io
alldata.com
*.test.tui.appcelerator.com
5641508757700608-fe2.pantheonsite.io
live-legacy-cms.pantheonsite.io
*.prod.tui.appcelerator.com
banking-business-review.com
*.prod.sjp.appcelerator.com
banking-business-review.com
*.abc.appcelerator.com
streetfilms.org
streetfilms.org
*.dev.oneok.appcelerator.com
lp.grad.online.udel.edu.help

Certificate

The complete raw certificate details for *.agilent.appcelerator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35DpCUjjVngwlFKIENsq
mEu+GD4hEAGjUiV300PregKXVIl7BYIuskwiH6TL2Hy8pbZA7rCC+8ugupuQqUWE
uEUXXyMoW5bs+vwoTiMbG9S/br8vYR8YFio3BGB0AbVs1b8wTtevtqqOvDjsI9Bp
RC5Tw0DJIRkSBgm9H8OEjzjiwP+nCBp/l3DUBqBOZdCi1zUlm6snZpngAhdXhrhL
8TjXaL7vNRuI0hfhMjpFE316lw3RXcer5fdPFv9yjBz4s8FioCUGkIYKHsvfksxd
on3Xr0OhBNYPnPMj1XvQRvUBTMa+ZsFRjPrq5LG5VcPhu0Sf9PasZHfmW5EU0Cxz
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8034613497984975828013079861300838618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.agilent.appcelerator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28222599938610751226610741647240751247957346603044112987625658570902869644723310242765259434496874327514728541132748363819709697217173417150873909288597585566321124545233740325300648061355364700764606843084738646637882805433125160219365117552466014181244027052035069572151322724679295984968438772874746908378772614899905766163595628600420470457271961677554923768188823083747679617216419800905056508706590501817288066822478698455943295448288022907351651345354049453187931829955647228677481138081696284967706430904850847142517254318507482971813495891352565471805255831018295529595506715414255422324248009602416874648539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6433c06a534976b97346b980b9151487c7a4955f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agilent.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilent.appcelerator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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