mra.ct450.com

- CallTower, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:11:e2:2c:f5:93:fe:60:98:27:79:13:8a:40:2f:06 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CallTower, Inc

Organization: CallTower, Inc
Organization unit: CCE
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:11:e2:2c:f5:93:fe:60:98:27:79:13:8a:40:2f:06
Serial Number (int): 14714364386841483341424399530346950406
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:60:75:d6:cf:4f:ad:8d:d2:2b:f0:91:bd:8e:85:99:c4:23:a3:c0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 04:6d:3d:16:62:8b:92:e0:4e:b8:18:a2:9b:31:f7:58:43:46:72:e4
Fingerprint (sha256): 22:4c:5e:c2:06:d0:f8:bf:c1:b2:ac:dc:6c:f0:1b:03:4b:5e:66:93:ee:25:6b:29:5f:61:e6:a1:c3:bb:f4:ca

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate mra.ct450.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mra.ct450.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mra.ct450.com
calltower.com
l00slccexp01e.l00.calltower.com

Other certificates including the domain name ct450.com

(limited to 100 certificates)
sip.ct650.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct650.com
sip.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
sip.ct650.com
sip.ct650.com
collaborate1.ct450.com
collaborate-atl.ct450.com
mra.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate.ct450.com
mra.ct450.com
sip.ct650.com
collaborate.ct450.com
collaborate.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate.ct450.com
collaborate-atl.ct450.com
mra.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct650.com
sip.ct650.com
collaborate-atl.ct450.com
collaborate-atl.ct450.com
edgpool01.ct450.com
sip.ct650.com
collaborate1.ct450.com
sip.ct650.com
sip.ct650.com
collaborate-atl.ct450.com
sip.ct650.com
sip.ct650.com
sip.ct650.com
collaborate1.ct450.com
sip.ct650.com
collaborate1.ct450.com
sip.ct650.com
collaborate-atl.ct450.com

Certificate

The complete raw certificate details for mra.ct450.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14714364386841483341424399530346950406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CallTower, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mra.ct450.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681609538269777963255832316544120673219659065247029388896224184562014939005054475380933255399575404637267390957076307613265517351338748375012328511055241346980323771868578944455025142226047683161093670701445502755882322530267049741312839537756286501039009249431564234045842610036218947699238523119001202229222104048314340233778454353508199099191587705072473965577945133640096095554873078102754752817046507967086813312239001138918074163276429791357177167073355484107893107723122252664183721148730355239132765599274562932831307569566340082517051292746424291133566592751182606549706862992435834684176413382703611219059247920709432717235859625410958281790446935104273174630893947664382101393405263916284118849358637102664076208574290505599611615518168621590048229770199483652255718625798253694865133518899820025231929619749641354912639650777158792699456853150886029719215863502882073576183937412877749178748025528138392760126283787567278778002882534506906212475157111494762398455120302662696429163216178187275403251375584509349652925194959221626102628796181301977290264639580868046249369044203314285678304538211817253000108850155580876932364417388766035484767514610152685274614279373372915610444816719953422056464307484408126661744645541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b96075d6cf4fad8dd22bf091bd8e8599c423a3c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mra.ct450.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calltower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l00slccexp01e.l00.calltower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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