vanity4.jiveon.com

- Jive Software -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 08:2b was issued on by GeoTrust Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Jive Software

Organization: Jive Software
Organization unit: Hosting
State / Province: California
Locality: Palo Alto
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:2b
Serial Number (int): 2091
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 25:b9:5d:99:fc:83:b3:79:55:ec:56:43:65:35:88:ec:0a:29:27:fc
Fingerprint (sha256): 1f:9e:cb:b6:06:b0:64:f5:21:43:20:74:a9:37:01:4b:14:67:ea:51:0e:b9:64:0a:e2:af:c5:4b:6d:f8:ec:f3

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate vanity4.jiveon.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vanity4.jiveon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app-sharingplatform.sodexonet.com
sharingplatform.sodexonet.com
app-community.mystreet.us.com
community.mystreet.us.com
app-community.lhh.com
community.lhh.com
vanity4.jiveon.com

Other certificates including the domain name jiveon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.jiveon.com
vanity7.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
*.jiveon.com
vanity6.jiveon.com
vanity21.jiveon.com
vanity3.jiveon.com
vanity6.jiveon.com
vanity4.jiveon.com
vanity.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
*.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
vanity6.jiveon.com
vanity3.jiveon.com
vanity2.jiveon.com
vanity7.jiveon.com
vanity2.jiveon.com
vanity4.jiveon.com
vanity7.jiveon.com
*.dev.jiveon.com
vanity.jiveon.com
*.jiveon.com
vanity3.jiveon.com
vanity.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
*.jiveon.com
vanity.jiveon.com
vanity6.jiveon.com
*.jiveon.com
vanity6.jiveon.com
vanity22.jiveon.com
vanity4.jiveon.com
vanity3.jiveon.com
vanity22.jiveon.com
vanity.jiveon.com
vanity6.jiveon.com
vanity7.jiveon.com
vanity7.jiveon.com
vanity3.jiveon.com
vanity7.jiveon.com
vanity7.jiveon.com
vanity2.jiveon.com
vanity1.jiveon.com
vanity3.jiveon.com
vanity.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
www.jivesoftware.com
*.jiveon.com
vanity5.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
vanity3.jiveon.com
vanity21.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity3.jiveon.com
vanity22.jiveon.com
vanity6.jiveon.com
vanity7.jiveon.com
*.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity21.jiveon.com
vanity.jiveon.com
vanity21.jiveon.com
*.jiveon.com
*.jiveon.com
vanity5.jiveon.com
vanity2.jiveon.com
vanity22.jiveon.com
vanity21.jiveon.com
vanity22.jiveon.com
*.jiveon.com
vanity22.jiveon.com
vanity.jiveon.com
vanity4.jiveon.com
vanity21.jiveon.com
vanity4.jiveon.com
*.jiveon.com
vanity21.jiveon.com
vanity.jiveon.com
vanity.jiveon.com
*.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
*.jiveon.com
vanity22.jiveon.com
*.jiveon.com

Certificate

The complete raw certificate details for vanity4.jiveon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXHXS9MUlZrQ9c1RkT4P
8QOj9nTxmJmu/k5/IONTvyN/3UgOVGNfDYWh9GQ438kIBlOVKxme9YhCQWd5EgFI
MMyozVyDY4MhJ/ZzWKdbWeg/6ypiIz44/PQsAAshrdmUtsyYvXXIdrZLqSzzKyl3
LEIYFkZ78g/ELrSrR6ysNJpWoJorO75znSnKjQB1wFsaUHysl4vRTZ74ATcbiPVF
2NU5EdPx3sn4ztK5xVpar4jxq99S5qm3Qtbpu5lqjpil1t2bNIu6v5DudGoOVxBx
j+Fl6kx9X5NYt08ZF4h/gK/Sum57aGSnmW/fZYZSUKWut2gQkkxiVk2ZjI0kOlm6
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 18:12:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-18 01:26:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jive Software'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vanity4.jiveon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25934989607765170537433992495352923177112278371860665459570873961869865184387060313410152012382917301431330906851312891966959596407854700924736638491413767408293017500359851129729078719089226965822813444001737909914700775451938858435470424448357589859160232808705078089380962639698867911830983840201619238555772859854628894569704860057199040513834756446470334684557528479390568859070972310120134309579847708857260796722500736648260488462554035386523345084003308953008415428567711920123823721995620149309192332629531525811777029726194919702476494939900076973815591859677107826687101493696885547874997541269449087760977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-sharingplatform.sodexonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharingplatform.sodexonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.mystreet.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mystreet.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-community.lhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.lhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity4.jiveon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004716eaef70e4d3f9d38272a5e21c8943c4a1073bb4724f9da350fa40fb3dd85fa537d49a4bb32b85154c9c8747598edf349313dc7ce6c1aef3766c54170c56b9746ec82b2e8a543d4f18531324ec008374512e74ea379de4ef4a450185c5575e694ca9fd3c340339e9dd39d28a9f205326040e4189af762d11a986a990bf56520a87f66fe7a71d107a32340508627b8b95f2d10762264f7969ecbe44ea84d41d414e50502073670ed94b26a7c88f251b93aeae0d70fae7db5999f73a49329829ee8cc034d6e2a79b70d8d70ea95704d260c867d15c123c20136fe0854fc0b53db6a75b96ce1062ff3bd235f1a7136ca4a261ada4ca5b09e3e580b3d24356c722