*.rsglab.com

- The Rocket Science Group LLC -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:1c:de:7e:3b:6d:9a:1a:50:c0:c1:7c:40:f3:05:1b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Rocket Science Group LLC

Organization: The Rocket Science Group LLC
State / Province: Georgia
Locality: Atlanta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:1c:de:7e:3b:6d:9a:1a:50:c0:c1:7c:40:f3:05:1b
Serial Number (int): 18759088949100401086062730752054986011
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5a:a4:54:6e:3f:af:ef:77:9e:cc:cc:33:cb:0f:dc:7c:da:d9:10:cf
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 99:66:5d:9f:f0:5a:b8:87:2b:62:9e:57:2b:79:10:52:00:40:be:d8
Fingerprint (sha256): 28:b1:0d:2d:bb:60:49:c3:b3:a9:98:5a:fe:57:28:36:ff:cb:a9:03:9c:c7:8e:bd:b0:ce:28:4e:b6:cf:d8:ff

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.rsglab.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rsglab.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rsglab.com
rsglab.com

Other certificates including the domain name rsglab.com

(limited to 100 certificates)
bench.rsglab.com
creative-assistant.rsglab.com
link.getup-shoes.com
storybook.rsglab.com
prototypes.rsglab.com
prototypes.rsglab.com
wink.rsglab.com
storefront.rsglab.com
mns-ise.rsglab.com
sitespeed.rsglab.com
mcvpn.rsglab.com
vacation-feed.rsglab.com
creative-assistant.rsglab.com
sitespeed.rsglab.com
router.prod.fabric.rsglab.com
fp.rsglab.com
go-test.rsglab.com
*.platform.rsglab.com
jss.rsglab.com
storybook.rsglab.com
*.rsglab.com
git.rsglab.com
downloads.e-ceos.com.br
www.colornix.biz
omnicache.rsglab.com
incidents.rsglab.com
wink.rsglab.com
go-test.rsglab.com
jss.rsglab.com
rsgmc-az-scs.corp.mailchimp.co
experiments.rsglab.com
staff.rsglab.com
sitespeed.rsglab.com
storefront.rsglab.com
data.rsglab.com
git-stage.rsglab.com
router.prod.fabric.rsglab.com
pcm-ise2.rsglab.com
www.aidhon.com
crashplan-vault.rsglab.com
*.rsglab.com
fp.rsglab.com
vacation-feed.rsglab.com
sitespeed.rsglab.com
*.rsglab.com
vacation-feed.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
router.dev.fabric.rsglab.com
storefront.rsglab.com
mcvpn.rsglab.com
*.rsglab.com
data.rsglab.com
mcvpnsw.rsglab.com
router.dev.fabric.rsglab.com
mcvpn.rsglab.com
mcvpnam.rsglab.com
creative-assistant.rsglab.com
*.platform.rsglab.com
boo.pushstart.com.br
front-end.rsglab.com
creative-assistant.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
sawa-dev-4.rsglab.com
creative-assistant.rsglab.com
storybook.rsglab.com
crashplan-vault.rsglab.com
backpack.rsglab.com
status-stage.rsglab.com
transit.rsglab.com
prototypes.rsglab.com
transit.rsglab.com
vacation-feed.rsglab.com
mcvpnap.rsglab.com
*.platform.rsglab.com
router.prod.fabric.rsglab.com
app01.altimeter.prod.pcm01.rsglab.com
sitespeed.rsglab.com
sitespeed.rsglab.com
thesaurum.thetislive.com
mcvpn.rsglab.com
wink.rsglab.com
www.kyber.space
data.rsglab.com
editing-platform.rsglab.com
fp.rsglab.com
storefront.rsglab.com
experiments.rsglab.com
incidents.rsglab.com
fp.rsglab.com
sitespeed.rsglab.com
router.prod.dsfgcloud.rsglab.com
editing-platform.rsglab.com
bench.rsglab.com
front-end.rsglab.com
app.nomasfilas.cl
es-it.rsglab.com
test-management.mhntools.net
incidents.rsglab.com

Certificate

The complete raw certificate details for *.rsglab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18759088949100401086062730752054986011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Rocket Science Group LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rsglab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787721632752449543078428451831986577205440478923648846862764504442292203679709095259488672438472577830528575371467497020373717819593317413978351083075886379713935383770187368858850449713088482805480023475635771649474416263361753946299784724708570992148389618800760593337195383226367864477882287470082592946471445676953634213640987213123296362611940262919514157239312243492906944374824732748743297484408100164272979173301885768599689328609163530367727906366515619035486081495280089954601291329399014942856957053102438772461296639897628198982238794604283191075166968741326271546835056082458035041674043536981148563199704466477243553353407825469028723443262545687058750016189364873633563215804879200864641693893645810040376534126418860876123860798261607614656766784153050229212110983926775895368666524106059079176112828326063131991164799412974327320628892209451128190631594677232875432476469768706454652297887268420224244578661398887853980899145851355756076344395637571187603621548293949020954639476990384121513484693127748468782360002186959594896490940382443202920990508441840161600077634940858934238432606463605827849061255886244613825927041084783842930307617692116671473945332191834403888280334755408942308152870216726273013520203653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5aa4546e3fafef779ecccc33cb0fdc7cdad910cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsglab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ef2debf3d0000040300463044022025d6dce6d66e7c627222b7b273bba6ebacb6da318c07e0fe804e21ad7a7c71ad022008a437904d8d20badb8190630a65d7567a865197a602ad4a8e22ef9709f18b8f0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018ef2debf7e00000403004730450220032556abd3d0854c0a4e02eeb393bccb71c29b1277b0e16263327a5bd2a3c289022100fcf8208dbcf60e742db2747f63584d6cca108d077a9d097871e1b3230d01b7a5007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018ef2debf920000040300473045022100ef007434e9e51ac789ddea6662e77448848c0419205d2f811538b08eb6089f3e022074435fda7d084e6061f7d47fa782414ed9907d597d79c7b8defe76c409d67664
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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