*.247realmedia.com

- AppNexus, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 57:9b:0d:b4:0b:c6:8c:e2:d1:b9:42:52:e3:15:7b:22 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

AppNexus, Inc.

Organization: AppNexus, Inc.
Organization unit: OAS
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:9b:0d:b4:0b:c6:8c:e2:d1:b9:42:52:e3:15:7b:22
Serial Number (int): 116447919582399047000052157017232866082
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 24:be:7d:ac:a9:3f:ca:af:62:b9:da:96:e9:ec:a1:15:51:ee:79:50
Fingerprint (sha256): 25:d5:77:48:b8:f0:ff:ab:29:35:45:1a:be:55:e0:9f:4d:dd:ec:65:0f:2b:eb:b9:ef:ba:bc:7c:22:c9:0c:c7

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.247realmedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.247realmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.247realmedia.com
247realmedia.com

Other certificates including the domain name 247realmedia.com

(limited to 100 certificates)
openadstream16.247realmedia.com
download.247realmedia.com
openadstream12.247realmedia.com
openadstream15.247realmedia.com
oas-eu-admin.247realmedia.com
247realmedia.com
oasc17w.247realmedia.com
network-ca.247realmedia.com
*.247realmedia.com
decidedna2.247realmedia.com
openadstream14.247realmedia.com
openadstream15.247realmedia.com
oasc17y.247realmedia.com
eu.services.247realmedia.com
openadstream17.247realmedia.com
oasrtx.247realmedia.com
openadstream10.247realmedia.com
oasc18.247realmedia.com
oasc-eu1.247realmedia.com
reports.dna.247realmedia.com
oasc17.247realmedia.com
oasc18.247realmedia.com
bifrost-ash.247realmedia.com
*.247realmedia.com
oasc17.247realmedia.com
oasc-eu1.247realmedia.com
openadstream10.247realmedia.com
delivery.uat.247realmedia.com
oasc18.247realmedia.com
*.247realmedia.com
openadstream-en1.247realmedia.com
oas-eu.247realmedia.com
reports.dna.247realmedia.com
sophos-secure.247realmedia.com
oasc-eu1b.247realmedia.com
*.247realmedia.com
openadstream15.247realmedia.com
bifrost-pa.247realmedia.com
oasc-eu1b.247realmedia.com
oasc18w.247realmedia.com
oasc17.247realmedia.com
*.247realmedia.com
oasc-eu1b.247realmedia.com
services.247realmedia.com
oasc18.247realmedia.com
oasc17w.247realmedia.com
oasc18.247realmedia.com
jira.247realmedia.com
oasc-eu1.247realmedia.com
oasc06.247realmedia.com
bifrost-lon.247realmedia.com
oasc17.247realmedia.com
oasc17.247realmedia.com
oasc11.247realmedia.com
oasrtx.247realmedia.com
oasc09.247realmedia.com
oasc17.247realmedia.com
openadstream16.247realmedia.com
fileshare.247realmedia.com
openadstream18.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasrtx-eu.247realmedia.com
decidedna1.247realmedia.com
library.247realmedia.com
oasc-eu1.247realmedia.com
network3reporting.247realmedia.com
oasc08.247realmedia.com
oasn03.247realmedia.com
oasc05.247realmedia.com
oasc17y.247realmedia.com
oasc18x.247realmedia.com
oasc17y.247realmedia.com
openadstream18.247realmedia.com
oasrtx.247realmedia.com
oasn04.247realmedia.com
oasc18.247realmedia.com
techsource.247realmedia.com
oasc-eu1.247realmedia.com
fileshare.247realmedia.com
oasc17y.247realmedia.com
oasc-training7.247realmedia.com
services.247realmedia.com
responsecollector.247realmedia.com
*.247realmedia.com
247connect.247realmedia.com
oasc-eu1.247realmedia.com
training7.247realmedia.com
*.247realmedia.com
openadstream8.247realmedia.com
fileshare.247realmedia.com
fileshare.247realmedia.com
networkadmin.realmedia.com
training7.247realmedia.com
openadstream10.247realmedia.com
oasc16.247realmedia.com
oasc17w.247realmedia.com
eu.services.247realmedia.com
api.dna.247realmedia.com
eu-tools.247realmedia.com

Certificate

The complete raw certificate details for *.247realmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5fFxJDis6UeXwEZk+Gt
2lZsOVVpvl1RDVxpeQ1OoK7Iupbgt6buSmGaU/3iAr2En6Fz2jU/NrtCUF05wzUl
u4vrSmVPy4Bp3gE1GgFEyaUfFncmNQPvc27oyJGkKlpYMtGOrcDUFRJDKNhX0rKc
SLOLOQPE1Zs1gs2njk9zea0DUiy0tNlIiQ7IkhtNmF7W157Y+vhlcWo7HGIxH8nu
2B5oxYS2WByKN0UoKpEUyZl6zqB4CGGGsytQSlRMWMHxmSoM5uil/GvrNaKPZVED
ipEsvH9nuRk2pHoVMnQ/+lTFC7lZpCj7F7HQ08ddm0Rce2cy5g7/EKRTkGMCY1nh
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116447919582399047000052157017232866082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AppNexus, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.247realmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25196264512481710074106709680802224929153019932778945947329371645142333059509986674992790618933805235353155742204227188683506648149376261555255229329938238137409776498543466035988490637631162666248350122489037919159669370739542117040923683560184607682536309289949867973400016292071056326470632368926465383125128526305693247942809776862326758630959474474121772510497459294132843114285412554224520598103671918748432063535087137067891910379620279926064312611677739759688111382372047492781051059272473811375555206748038994217463100569101352354924088410705766314882682002001743210924769622949917218550480431793381121319231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.247realmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '247realmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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