usa.vpn.exlibrisgroup.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 2b:5d:90:4e:8e:10:fc was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=usa.vpn.exlibrisgroup.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:5d:90:4e:8e:10:fc
Serial Number (int): 12206298373165308
Serial Number lenght: 54 bits, 7 octets

SubjectKeyId: 9d:32:e9:99:17:c5:cf:b4:9e:09:be:90:f1:2f:1f:55:e4:f0:b1:50
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 38:20:4f:33:cb:26:d5:ac:ea:8d:79:cc:5c:5c:04:e2:0f:1e:78:46
Fingerprint (sha256): 21:bd:c4:ce:c7:c6:59:c5:23:b3:f7:e9:82:15:39:0d:f1:27:a8:06:66:da:5f:9b:89:e8:05:e5:c1:88:74:6c

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-47.crl

Check the revocation status for certificate usa.vpn.exlibrisgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usa.vpn.exlibrisgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usa.vpn.exlibrisgroup.com
www.usa.vpn.exlibrisgroup.com

Other certificates including the domain name exlibrisgroup.com

(limited to 100 certificates)
trust.exlibrisgroup.com
ads1.aryaka.net
ads1.aryaka.net
*.alma.exlibrisgroup.com
jira.exlibrisgroup.com
exlidp.exlibrisgroup.com
ads4-wc.aryaka.net
support.cdnetworks.net
ads2.aryaka.net
ads4-wc.aryaka.net
email.exlibrisgroup.com
campusm.exlibrisgroup.com
san01.hosted.exlibrisgroup.com
value.exlibrisgroup.com
support.cdnetworks.net
san-ap01-gd.hosted.exlibrisgroup.com
value.exlibrisgroup.com
ads4-wc.aryaka.net
campusm.exlibrisgroup.com
status.exlibrisgroup.com
support.cdnetworks.net
developers.exlibrisgroup.com
ads2.aryaka.net
pages.exlibrisgroup.com
support10.cdnetworks.net
exlibrisgroup.com
email.exlibrisgroup.com
ads2.aryaka.net
exlibrisgroup.com
support10.cdnetworks.net
chipri11blna.hosted.exlibrisgroup.com
support.cdnetworks.net
*.hosted.exlibrisgroup.com
support10.cdnetworks.net
ads1.aryaka.net
lyncsip-il.exlibrisgroup.com
test.exlibrisgroup.com
support10.cdnetworks.net
support10.cdnetworks.net
page.exlibrisgroup.com
*.campusm.exlibrisgroup.com
support10.cdnetworks.net
library-savings.exlibrisgroup.com
ads2.aryaka.net
developers.exlibrisgroup.com
support.cdnetworks.net
value.exlibrisgroup.com
ger.vpn.exlibrisgroup.com
www.value.exlibrisgroup.com
ads2.aryaka.net
support10.cdnetworks.net
ads1.aryaka.net
developers.exlibrisgroup.com
ads1.aryaka.net
bx.ha.service.exlibrisgroup.com
ads1.aryaka.net
support.cdnetworks.net
support10.cdnetworks.net
support10.cdnetworks.net
ideas.exlibrisgroup.com
san-eu02-gd.hosted.exlibrisgroup.com
staging.exlibrisgroup.com
*.campusm.exlibrisgroup.com
sfxhosted.exlibrisgroup.com
*.campusm.exlibrisgroup.com
support.cdnetworks.net
sfxamgen.exlibrisgroup.com
preview1.hosted.exlibrisgroup.com
support.cdnetworks.net
rapid.exlibrisgroup.com
funding-insights.exlibrisgroup.com
support10.cdnetworks.net
san01.hosted.exlibrisgroup.com
support10.cdnetworks.net
support10.cdnetworks.net
ads4-wc.aryaka.net
helpdesk.exlibrisgroup.com
usa.vpn.exlibrisgroup.com
support.cdnetworks.net
knowledge.exlibrisgroup.com
support.cdnetworks.net
ads1.aryaka.net
primo-studio.exlibrisgroup.com
customer-experience.exlibrisgroup.com
rapidill-savings.exlibrisgroup.com
ads2.aryaka.net
rapid.exlibrisgroup.com
isa.exlibris.co.il
ads1.aryaka.net
ads4-wc.aryaka.net
sfxhosted.exlibrisgroup.com
*.userservices.exlibrisgroup.com
registration.service.exlibrisgroup.com
*.alma.exlibrisgroup.com
ads1.aryaka.net
support.cdnetworks.net
*.primo.exlibrisgroup.com
knowledge.exlibrisgroup.com
pages.exlibrisgroup.com
*.hosted.exlibrisgroup.com

Certificate

The complete raw certificate details for usa.vpn.exlibrisgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqnUCRr7Yu3w0FBj8fWw
kRA0Hn8vD4+A3jG2qm0fnCq2LmgI00o4j7nCPsw4J/20h7QI9u8huO5KH6+05A0+
qnnqQ+FvhjbytU6d434KFx+2z3KkgLQH5v8ZutF65htfxg5u1EMCjVxaIdYQlqbZ
2sUlb6QFbQjBVMBGvMpsGMkXWRGwDkM996AAc0IRk+E2JdxaYS7u+9myPopv0zzj
xP/uISp8VgrOZlVMQltDnlM5NeK37/Nhwhgndq78Fj0iehbl5EScOKC70998IO1F
M5LhIpZ5I6KvkSeS0Mo+bf8NEckNOIdC9Le+tjR1AmKn+PV8Z5AsfTQmZOXXbf2r
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12206298373165308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-23 15:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-27 15:00:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usa.vpn.exlibrisgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26088836261190809928114170346915717774047453589341433741604881779099685424453991099681078155419069980503118390618398079017230286176840440603736462533969733500977172447284506521484162721818168445402708289906575622701027940255806737133226693347795657753673162359544838887137859083436798444409334126613523652006567535222386270745839959976614165561972835188606453660883881267585519456982812053473423752150241518404872619309000728321813682148140295541553458287655955133079447420435704164821304573012252188381367440850972928057631883819592299311800170467967651547920300389854623372728771413955298175507090546067265086663663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-47.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.vpn.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa.vpn.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d32e99917c5cfb49e09be90f12f1f55e4f0b150
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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