jbxhypapp101.jackinthebox.com

- Jack in the Box -

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 15:d1:77:ed:a5:80:02:65:a3:c3:f0:9d:d2:df:c6:fe was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Jack in the Box

Organization: Jack in the Box
Organization unit: OBI-WAN
State / Province: California
Locality: San Diego
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:d1:77:ed:a5:80:02:65:a3:c3:f0:9d:d2:df:c6:fe
Serial Number (int): 29001410389954143179858547458699151102
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 30:a7:33:32:c1:95:c0:8a:c0:4f:52:fc:b2:5c:5b:b4:1e:f6:3f:3e
Fingerprint (sha256): 1c:42:37:36:8e:65:a4:10:ca:64:ef:59:f6:9a:ed:e6:6b:c4:b2:8d:4a:3d:af:f9:9b:88:34:64:e1:2a:4b:c2

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate jbxhypapp101.jackinthebox.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jbxhypapp101.jackinthebox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jbxhypapp101.jackinthebox.com

Other certificates including the domain name jackinthebox.com

(limited to 100 certificates)
agent-qa.travelers.com
jbxobiapp201.jackinthebox.com
sspr.jackinthebox.com
archivemanager.jackinthebox.com
san4.yext-cdn.com
vcs-control.jackinthebox.com
abs.jackinthebox.com
jackinthebox.com
my.jackinthebox.com
apiservices.jackinthebox.com
jobapp-test.jackinthebox.com
san4.yext-cdn.com
ssreg.jackinthebox.com
san4.yext-cdn.com
agent.travelers.com
cms.jackinthebox.com
clicks.info.jackinthebox.com
www.jackinthebox.com
jbxhypapp101.jackinthebox.com
BeyondTrust.jackinthebox.com
san4.yext-cdn.com
www.jackinthebox.com
cloud.jackinthebox.com
cloud.jackinthebox.com
JIBgatewayprem.jackinthebox.com
sts.jackinthebox.com
agent.travelers.com
jackdna.jackinthebox.com
cloudq.jackinthebox.com
sip.jackinthebox.com
san4.yext-cdn.com
jackdna.jackinthebox.com
secureloginstandby.jackinthebox.com
sni.cloudflaressl.com
www.jackinthebox.com
locations.jackinthebox.com
cloudq.jackinthebox.com
*.portal.jackinthebox.com
san4.yext-cdn.com
pts1.jackinthebox.com
locations.jackinthebox.com
apiservices-test.jackinthebox.com
STS.jackinthebox.com
oa.jackinthebox.com
dev.payments.api.jackinthebox.com
jackdna.jackinthebox.com
san4.yext-cdn.com
drcloud.jackinthebox.com
vcs-expressway.jackinthebox.com
abs.jackinthebox.com
exch-ht.jackinthebox.com
synergichealthcareers.yext-cdn.com
my.jackinthebox.com
STS.jackinthebox.com
locations.keyrealtyservices.com
san4.yext-cdn.com
staging.jackinthebox.com
jbxhypapp202.jackinthebox.com
san4.yext-cdn.com
clicks.emails.jackinthebox.com
csclearpassp03v.jackinthebox.com
local.pharmacy.safeway.com
locations.jackinthebox.com
staging.jackinthebox.com
synergichealthcareers.yext-cdn.com
apiservices-test.jackinthebox.com
exch-ht.jackinthebox.com
webmail.jackinthebox.com
answers-embed.shumanlaw.com.pagescdn.com
cisco-codec.jackinthebox.com
cloudq.jackinthebox.com
local.pharmacy.safeway.com
links.jackinthebox.com
locations.jackinthebox.com
BFXWebReports.jackinthebox.com
investors.jackinthebox.com
store-events.louandgrey.com
san4.yext-cdn.com
san4.yext-cdn.com
sip.jackinthebox.com
webmail.jackinthebox.com
webmail.jackinthebox.com
san4.yext-cdn.com
jackdna.fr.jackinthebox.com
jackinthebox.com
www.jackinthebox.com
cloud.jackinthebox.com
sip.jackinthebox.com
mydr.jackinthebox.com
san4.yext-cdn.com
drcloud.jackinthebox.com
www.jackinthebox.com
qamenuapi.jackinthebox.com
ststest.jackinthebox.com
jackdna.jackinthebox.com
jackshttp.jackinthebox.com
qamenuapi.jackinthebox.com
webmail.jackinthebox.com
www.jackinthebox.com
DevJackDNA.jackinthebox.com

Certificate

The complete raw certificate details for jbxhypapp101.jackinthebox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wJM+bDCiXqa8Zd1UwJ
qXpYEa2SP3m4MS4F/6qzqKD/rD+s3r0dPmdI07L/RW8tjERpasN66vWc8vwb2j/Q
uEBMHkcRQ7wXs9QhT8tKwbOD4TH1V/h4UukMZgsGpFMKWHQGweFTMzU17wrl5MCE
G4DOGyCRqtcy3s0pb3SwR3Pta4vxiA/UxjIt6tI6zxWCQ8GcDvMHMzJLEvA0Fz1W
HRQ44hGTgSdE9MZTLk4a2uoPoVpUFBRRDaveUkr5/is2xklPDck734Z5ecJa7ajO
rcq6MC/5speRfuzdvN5aJdGLG9cJssLKm0WTpqQ5ldht/G/+sZXsLkNMh9Rvmfwx
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29001410389954143179858547458699151102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jack in the Box'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OBI-WAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'jbxhypapp101.jackinthebox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22152867774747639489507087723977772955881553979113991121894374872321602913574710286750336048213566741185595536795094600935999532661456134929095661401218017511878577547742911976585456093940746616605693617201270524992518446623035501777843359859387074171007505646307943808994586472522450632180213988471241360213875963615203621702816349808270841324970583903677711511619860042455117907123253826322603112220534492982000204351640039192632381787357353038167004490626193951394047201115403509789613582121964613853573924197911333249519098601621614596293701142958708436944196624109231844973622132457575172384125498571071199916431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbxhypapp101.jackinthebox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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