blogs.dxc.technology

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:7a:dc:71:d4:14:0d:20:60:5f:46:f2:b7:8c:a4:aa:c5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogs.dxc.technology

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:7a:dc:71:d4:14:0d:20:60:5f:46:f2:b7:8c:a4:aa:c5
Serial Number (int): 282257392606967484844498450423363846580933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:ae:c8:a3:ee:1a:42:25:03:46:ed:41:db:b8:4b:c4:c1:7c:6e:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:2c:0e:1e:12:fa:02:0b:fb:0a:6a:3d:39:56:96:5d:9b:95:f8:0a
Fingerprint (sha256): 1f:ee:72:35:4c:69:d2:1a:2e:9a:90:3b:d8:a9:e1:ab:4b:6f:3a:45:51:49:2b:c9:f2:5e:43:b7:87:30:90:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogs.dxc.technology

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogs.dxc.technology

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogs.dxc.technology
thrive.dxc.technology

Other certificates including the domain name dxc.technology

(limited to 100 certificates)
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
dxc.technology
apigw-itg.itcs.houston.dxc.technology
f2.shared.global.fastly.net
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
dxc.technology
f2.shared.global.fastly.net
dxc.technology
san400.cdntwrk.com
api.vpc.dxc.technology
f2.shared.global.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
dns-vetting1b.map.fastly.net
www.csc.com
alm3g.dxc.technology
escscicextitg.itcs.houston.dxc.technology
f2.shared.global.fastly.net
b2bgtw.itcs.houston.dxc.technology
f2.shared.global.fastly.net
f2.shared.global.fastly.net
standardproposalsource.ext.dxc.com
dns-vetting1b.map.fastly.net
blogs.dxc.technology
f2.shared.global.fastly.net
vpn.sras.de.dxc.technology
dxc.technology
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
*.twistage.com
f2.shared.global.fastly.net
toolbox.csc
f2.shared.global.fastly.net
sta.itcs.houston.dxc.technology
boe-cp.itcs.houston.dxccorp.net
f2.shared.global.fastly.net
portal.vpc.dxc.technology
*.lscp.dxc.technology
f2.shared.global.fastly.net
f2.shared.global.fastly.net
dxc.technology
standardproposalsource-test.ext.dxc.com
demo.insurance.dxc.technology
san2706.cdntwrk.com
f2.shared.global.fastly.net
www.csc.com
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
qseitgext.itcs.houston.dxc.technology
portal.vpc.dxc.technology
portal.vpc.dxc.technology
san3265.cdntwrk.com
f2.shared.global.fastly.net
dns-vetting1b.map.fastly.net
san2477.cdntwrk.com
f2.shared.global.fastly.net
f2.shared.global.fastly.net
turtl.dxc.technology
toolbox.csc
f2.shared.global.fastly.net
f2.shared.global.fastly.net
f2.shared.global.fastly.net
dns-vetting1b.map.fastly.net
blogs.dxc.technology
token.sras.de.dxc.technology
f2.shared.global.fastly.net
blogs.dxc.technology
dns-vetting1b.map.fastly.net
dxc.technology
servicestatusdashboard.dxc.technology
demo.insurance.dxc.technology
f2.shared.global.fastly.net
apigw.itcs.houston.dxc.technology
f2.shared.global.fastly.net
dxc.technology
toolbox.csc
somni.dxc.technology
dns-vetting1b.map.fastly.net
f2.shared.global.fastly.net
connect.dxc.technology
f2.shared.global.fastly.net
san3265.cdntwrk.com
f2.shared.global.fastly.net
ols.dxc.technology
f2.shared.global.fastly.net
f2.shared.global.fastly.net
escscicextpro.itcs.houston.dxc.technology
f2.shared.global.fastly.net
toolbox.csc
f2.shared.global.fastly.net
escscicextpro.itcs.houston.dxc.technology
f2.shared.global.fastly.net
apigw-itg.itcs.houston.dxc.technology
alm3g.dxc.technology
webanalytics.dxc.technology
blogs.dxc.technology
dns-vetting1b.map.fastly.net

Certificate

The complete raw certificate details for blogs.dxc.technology in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYZriPPZUjbk0pDdyLN5
Hdu1lSTjpIekjNXiBv78OpAokSeXSl1zqkSDCqrAXozuq2FuPuaOatk64uOXCUv7
+rB0hfYb+zwsawWQUgkJx7Pga/oWcY2Ac4OTVbPuin93BZrN7LpI0tvSgnHFxSS3
oXsAxT5x7pVLru2XDHtcQaK8dtvHFFPNeuzKZn1vARdNaFsLiHYFVLoHtcxj5iVn
/4+sS0q0eTRT65M88Kz0ahfsa2o0Uy5m5H3SwfL7SRnC7yUDws6jMnWPQ8YpWVyR
wYe7Wvf0GmaOvgdsEfDVeNq3vcS+ipBTM2qb0xJQqwZjW4IhHtT9CETCGBkUIFWk
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282257392606967484844498450423363846580933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 04:29:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 04:29:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogs.dxc.technology'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22915418200168850872786333136284853029860709844991841238731991445926388924540504322210050566740882547779462355267592041350186332716041982929417215568645181294644712656269210231228131678947809041005861741822122829588779837376049986415556442972378108045616853014170806376526344476557706267371124386986533099023488847077474486177156648678235555742325828168348465179412750218324264808386812255889441122878307717974983142767783746699620013233740026084816841627606609841083272167001294991457146412390525139524341517487196580728585530506678061679643343329368814777605656654705503566898599341125260782159796440321085259752613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87aec8a3ee1a42250346ed41dbb84bc4c17c6e66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.dxc.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrive.dxc.technology'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017061125274000004030047304502200c3da402b0cb926dfdb5b8487a5c96422b891ccaeb23a46c6534f9e8ccf318a0022100d4ec26fbcf67289e1d2a521fa4245d47f24fa9267c61f5cca21d6644cd4978e8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170611252890000040300483046022100b0094d1fd19965128b60804dea048e8242e74605387a66aec519b64a2e1f39350221008f66599db0ca048fe6050106d99ebdf4ec2bf36d43f65f4ba5e4f1fa859f9143
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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