www.dev4.grs.gtinet.org

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:0d:30:b5:b0:1d:8a:6a:5a:22:d4:95:79:86:7b:39 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.dev4.grs.gtinet.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:0d:30:b5:b0:1d:8a:6a:5a:22:d4:95:79:86:7b:39
Serial Number (int): 13360767767473576075984472471555701561
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 64:46:25:94:10:cd:28:26:7e:87:83:8d:ff:04:a5:4c:1f:0d:b8:7d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 97:e6:ff:14:6d:61:26:27:2a:ec:c6:95:de:e7:c7:4e:4e:ac:b6:8d
Fingerprint (sha256): 18:d5:da:d4:29:38:ff:d0:fa:0c:55:7f:1d:87:3f:5f:10:0e:92:20:41:dc:66:fa:56:05:3b:f9:da:14:f8:08

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.dev4.grs.gtinet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dev4.grs.gtinet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dev4.grs.gtinet.org

Other certificates including the domain name gtinet.org

(limited to 100 certificates)
gtiocsaccess.gtinet.org
support9.cdnetworks.net
san-003.ceros.com
san-003.ceros.com
webmail.gtinet.org
support9.cdnetworks.net
fin.gtinet.org
support9.cdnetworks.net
fin.gtinet.org
gtilknowledgebase.gtinet.org
support9.cdnetworks.net
gtiocsaccess.gtinet.org
selfscan.gtinet.org
*.training.ftr.gtinet.org
support9.cdnetworks.net
finx.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
mobilesrv.gtinet.org
www.dev4.grs.gtinet.org
finx.gtinet.org
support9.cdnetworks.net
*.grs.gtinet.org
fin.gtinet.org
*.gtinet.org
gtilknowledgebase.gtinet.org
gisrpt.gtinet.org
filehub.gtinet.org
gisrpt.gtinet.org
gis.gtinet.org
selfscan.gtinet.org
gtilknowledgebase.gtinet.org
gtiocsweb.gtinet.org
gisrpt.gtinet.org
authstagelink.gtinet.org
gtilknowledgebase.gtinet.org
support9.cdnetworks.net
fin.gtinet.org
gisrpt.gtinet.org
*.staging.ftr.gtinet.org
support9.cdnetworks.net
gisrpt.gtinet.org
support9.cdnetworks.net
gisrpt.gtinet.org
connect.gtinet.org
*.assurance.gtinet.org
support9.cdnetworks.net
*.grs.gtinet.org
support9.cdnetworks.net
*.uat.ftr.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
filehub.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
*.grs.gtinet.org
*.assurance.gtinet.org
support9.cdnetworks.net
san-003.ceros.com
gisrpt.gtinet.org
support9.cdnetworks.net
gisrpt.gtinet.org
*.gtinet.org
support9.cdnetworks.net
gis.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
webmail.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
san-003.ceros.com
irc-dev.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
*.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
gtilknowledgebase.gtinet.org
mobilesrv.gtinet.org
san-003.ceros.com
san-003.ceros.com
gis.gtinet.org
*.gtinet.org
support9.cdnetworks.net
support9.cdnetworks.net
filehub.gtinet.org
support9.cdnetworks.net
san-003.ceros.com
support9.cdnetworks.net
support9.cdnetworks.net
*.gtinet.org
webmail.gtinet.org
finx.gtinet.org

Certificate

The complete raw certificate details for www.dev4.grs.gtinet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWiG51YoJaS8+dPfEWfd
c9cvVXygbpjgRnfBzKJF6hRwBs/qwtxJIv9SPuYbl999ToUyi0XGNxj/cB0TIjt/
nKYhupyyzircjqqGiKZbK/evw7p7xB57+FR5LLKQK1eNJ0bo3Yls4mXVIOeDtZbH
Zpfqw7d2qJhr50Kevl5b++vXH2TRRBw5PBLj1hz8NFUkA8tiMDFfAmGn+tTLA2BP
EtuloSChl0poKI6eB8nZ9wVX2Bx2FiKifYcQrrpMk/HJgFxG+oubdajBg5BLLL9I
UxDioVmzhE8CgsaZgqVdw9h7GMa20wGevKTgWhswnwF44iCfDafGeNYRSBSnABz5
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13360767767473576075984472471555701561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dev4.grs.gtinet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25425443466887901647383956887764785862477879150946835038194268880021396877120532911584445298610544832077470203557887192669534322609961286237825506733067146665718031656847215614471291783912945643089348671609189561567145013550331586922872303953690966296024363718529709690799641783667879595422828583943443905980632231702428658399015944355228518123205608201712187032989941140709977629268924092387594350864687160038967394586320111902626784025561271902425818843342008136829347070332038573630970905932597529139819894440937001324986996863915303134707686812569286574480513749261671858894966496753793789706151228906420385413477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6446259410cd28267e87838dff04a54c1f0db87d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev4.grs.gtinet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c39d1c9bc000004030046304402203ab737be38c3a3f33acb8f9bc34de900175f12af236f9a1c9928d00e795e3d74022008271f7d2610ef0711a80f59be04d5bed00f89450a44ddb09b5b400433e2a22600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c39d1c9dc0000040300483046022100e5d04ac1c41bb787ef44d611c5f845856a4a76aa36a35defb795af21594e8152022100f04c8918cb102ea0c86253fad55c8734068b7523187ded6adc4e49105f8d0eb5007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c39d1c9b90000040300483046022100f79b9110148699aec9e7b0b15123d03df196514c3bdfbea47ee3d691b3c490bc0221009f1ad369c8d20f6e34ae26f3ac97f5f7716d0cce7b61ff4f2059128d1142d981
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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