kdqytm.vipre.com

- Criteo SA -

Issued by DigiCert ECC Secure Server CA

About this certificate

This digital certificate with serial number 05:74:6d:e4:da:22:c6:dc:d9:d1:8c:03:f2:3d:c1:53 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Criteo SA

Organization: Criteo SA
Organization unit: CRITEO SA
Locality: Paris
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:74:6d:e4:da:22:c6:dc:d9:d1:8c:03:f2:3d:c1:53
Serial Number (int): 7250675328692245375236661358737867091
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:60:49:57:17:af:05:34:f3:b1:6c:48:5b:06:2d:19:64:a1:7c:68
AuthorityKeyId: a3:9d:e6:1f:f9:da:39:4f:c0:6e:e8:91:cb:95:a5:da:31:e2:0a:9f

Fingerprint (sha1): 3b:75:03:6e:fe:eb:48:40:9f:d4:f5:43:6f:e6:9b:72:b7:4c:bb:2b
Fingerprint (sha256): 1c:84:6f:f7:66:22:74:1b:32:9a:7e:b6:f2:3b:99:56:69:0e:3d:c1:d6:6a:f5:ed:0a:d2:2b:28:dd:b2:13:51

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-ecc-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-ecc-g1.crl

Check the revocation status for certificate kdqytm.vipre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kdqytm.vipre.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kdqytm.vipre.com

Other certificates including the domain name vipre.com

(limited to 100 certificates)
labs.vipre.com
prod.13.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
support.mytimezero.com
prod.13.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
*.vipre.com
support.mytimezero.com
prod.12.slot.cdn.salesforce-communities.com
ideas.vipre.com
prod.12.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
support.mytimezero.com
*.bi-dev.vipre.com
prod.12.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
*.vipre.com
prod.13.slot.cdn.salesforce-communities.com
save.vipre.com
support.mytimezero.com
prod.13.slot.cdn.salesforce-communities.com
sni.cloudflaressl.com
prod.13.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
support.mytimezero.com
threattrack.com
ideas.vipre.com
info.vipre.com
support.mytimezero.com
prod.13.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
prod.12.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
kdqytm.vipre.com
fdus-24a.freshdesk.com
protect.vipre.com
prod.13.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
protect.vipre.com
support.mytimezero.com
prod.12.slot.cdn.salesforce-communities.com
helpdesk.vipre.com
support.mytimezero.com
support.mytimezero.com
prod.13.slot.cdn.salesforce-communities.com
support.mytimezero.com
*.vipre.com
prod.12.slot.cdn.salesforce-communities.com
biz.vipre.com
partners.vipre.com
fdus-24a.freshdesk.com
prod.13.slot.cdn.salesforce-communities.com
ideas.vipre.com
helpdesk.vipre.com
fdus-24a.freshdesk.com
save.vipre.com
tiq.staging.ng.vipre.com
support.mytimezero.com
prod.12.slot.cdn.salesforce-communities.com
trk.vipre.com
prod.12.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
fdus-24a.freshdesk.com
save.vipre.com
*.vipre.com
success.vipre.com
prod.12.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
prod.13.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
save.vipre.com
prod.13.slot.cdn.salesforce-communities.com
shop.vipre.com
prod.13.slot.cdn.salesforce-communities.com
prod.12.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
prod.13.slot.cdn.salesforce-communities.com
support.mytimezero.com
support.mytimezero.com
threattrack.com
trk.vipre.com
support.mytimezero.com
protect.vipre.com
prod.13.slot.cdn.salesforce-communities.com
support.mytimezero.com
prod.12.slot.cdn.salesforce-communities.com
support.mytimezero.com
threattrack.com
prod.12.slot.cdn.salesforce-communities.com
fdus-24a.freshdesk.com
prod.12.slot.cdn.salesforce-communities.com
tiq.staging.ng.vipre.com
support.mytimezero.com
prod.12.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for kdqytm.vipre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFrnXVt6kOY86a8mkLrx6qWxHQjgH
cU0Asf8qJigSUhgn9TWrq8Cu37Sy8rLIpQAStE1Q0EqWeEaGbFjljUYZkQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7250675328692245375236661358737867091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert ECC Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Criteo SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CRITEO SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kdqytm.vipre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000416b9d756dea4398f3a6bc9a42ebc7aa96c47423807714d00b1ff2a262812521827f535ababc0aedfb4b2f2b2c8a50012b44d50d04a967846866c58e58d461991
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a39de61ff9da394fc06ee891cb95a5da31e20a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1960495717af0534f3b16c485b062d1964a17c68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdqytm.vipre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d2a4238290000040300483046022100953a487e8db9dc5ddc9952699bd2e651041e9468bc76d7b45b9f0c256db33b08022100de2ce4526c4315a812024deff34f3cbca034954054b3ac9e2f76f27240888a310077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d2a42388d0000040300483046022100ce173f95f7dc4bad0801b243f574b70ca4faba2e562001426232faa186d5b68f022100b21ed3843aeba31c8e81b3dcccbe2bc1edb9e53f11a3d280d1b179a2d3b89892
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32669266775332110632371919216470941315294115536883892850593996381760775698251187506591513652172673924697884841558828
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16258162455166166510625590128937196973662707226708943135569539776934764705573999111697212368136637348270387285993994