tecnet.tecolote.com

- Tecolote Research Inc. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:7d:93:03:c8:7e:74:7c:b3:11:86:83:28:48:8e:80 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tecolote Research Inc.

Organization: Tecolote Research Inc.
Organization unit: Corporate
State / Province: California
Locality: Goleta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:93:03:c8:7e:74:7c:b3:11:86:83:28:48:8e:80
Serial Number (int): 4639702908617702122975043593630682752
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 54:f3:8a:f7:66:bf:94:a8:f0:8b:dd:f6:4b:cd:55:a7:a5:c1:bd:85
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 58:bb:2a:48:38:b8:28:01:38:59:c5:50:25:04:c3:91:b2:f6:5a:cf
Fingerprint (sha256): 30:81:93:61:d4:9c:3a:dd:2f:c9:b1:3f:a2:c5:6e:30:9c:be:17:ab:8f:f9:4a:bd:56:bd:3c:f3:d7:fa:2c:d6

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate tecnet.tecolote.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tecnet.tecolote.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tecnet.tecolote.com

Other certificates including the domain name tecolote.com

(limited to 100 certificates)
mycenter.tecolote.com
accedge.tecolote.com
jiatmaint.tecolote.com
help.tecolote.com
demoweb.tecolote.com
www.services.tecolote.com
traveler.tecolote.com
tecolote.com
services.tecolote.com
time.tecolote.com
devweb08.tecolote.com
jiat.tecolote.com
helpdesk.premierpress.com
time.tecolote.com
ts.tecolote.com
jiatmaint.tecolote.com
servicedesk.tangerinelife.com
time.tecolote.com
demoweb.tecolote.com
ts.tecolote.com
cadetestweb.tecolote.com
tecnet.tecolote.com
portal.tecolote.com
devwebs.tecolote.com
servicedesk.tangerinelife.com
helpdesk.roadandrail.com
cadetestweb.tecolote.com
cadedemoweb.tecolote.com
iithelp.childrensmuseum.org
tecnet.tecolote.com
knws.tecolote.com
nightshadows.tecolote.com
www.tecolote.com
KnWS-WDC.tecolote.com
traveler.tecolote.com
servicedesk.galvestoncountytx.gov
www.services.tecolote.com
www.services.tecolote.com
www.services.tecolote.com
traveler.tecolote.com
KnWS-WDC.tecolote.com
www.tecolote.com
ts.tecolote.com
support.healthshareexchange.org
time.tecolote.com
devweb20s.tecolote.com
support.firsteagle.com
traveler.tecolote.com
demo.tecolote.com
tecnet.tecolote.com
EPM.tecolote.com
servicedesk.tangerinelife.com
time.tecolote.com
accedge.tecolote.com
servicedesk.tangerinelife.com
vdi.tecolote.com
portal.buyautopartsonline.shop
serviceportal.tecolote.com
view.tecolote.com
communities.tecolote.com
lyncweb.tecolote.com
ts.tecolote.com
traveler.tecolote.com
eschedules.tecolote.com
cadedemoweb.tecolote.com
dev.tecolote.com
accedge.tecolote.com
time.tecolote.com
timetest.tecolote.com
lyncweb.tecolote.com
trac.tecolote.com
trac.tecolote.com
sni.cloudflaressl.com
tecnet.tecolote.com
ts.tecolote.com
tecnet.tecolote.com
traveler.tecolote.com
support.healthshareexchange.org
helpdesk.plan-roa.org
www.services.tecolote.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
trac.tecolote.com
servicedesk.tangerinelife.com
www.tecolote.com
help.tecolote.com
tecnet.tecolote.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
tecnet.tecolote.com
portal.buyautopartsonline.shop
cadetestweb.tecolote.com
tta.tecolote.com
traveler.tecolote.com
KnWS-WDC.tecolote.com
servicedesk.tangerinelife.com
nightshadows.tecolote.com
CWA.TECOLOTE.COM
jiatmaint.tecolote.com
servicedesk.tangerinelife.com

Certificate

The complete raw certificate details for tecnet.tecolote.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl+7gCUQc6PqMds8go34
pjS1ev+jFFFmFyeQWva1iR0IihGZ2r/zBf5opjhzh2I1pbg+MILMNZR5b+e5njgB
lHpv+SqIEDLHSP3b2SY/6EXYSUcrUoSDoZHi2cWUlsqxna5bRI0hnZ6MAvNEis15
phx01aIALsGmT8XONLfxeVBaD2AVxYk3Rb6jG+cIKz8ccoZ00CTGBqp96xouECrR
JBGg6woNAMAoEAX5j1e0d+02DrkTn32i39Q/lQbZg6wXq4ZH1mWNYLZMe03JIVj9
AMfm2yUNqBnZhU46+x3i/9q7WbZGORV+yGZGiFMi5HU4uaATAWVUtYjEA/5x7bXf
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4639702908617702122975043593630682752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goleta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tecolote Research Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tecnet.tecolote.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17973046722940799315009851067285047473550922761968648570891667508309051106774709196616653761774319242115757634815439941882108279557323831635927211325108350957183317064847323984114604471330157166261766766739004687686093590205393466218567742167085237107531153861676297356176771761048894955114168652131894063248177500454641593688502958800898141932730630090570933956151549945927331517672623136247378817620392494557448189028390391571962885058665984974525422312256406917164173773178571711975881516865798482772038606185540961074606040697343017240966043218137795661058797247771668202100996528175640385195419697313613675356139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54f38af766bf94a8f08bddf64bcd55a7a5c1bd85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnet.tecolote.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009602076b768dac3da38ff80a9b4abfa83b1761cb4635b92e98243e5dde5586121bfb3ad3f2e2188c4f4495cbd4b7b88eb7caf8685fd6b7f8cd394e2db21e895b7970c2e59cc0f7cf65fb2e81bf86aa64887c642b8ccf3e369f0340a23ed51ac22f0bd60004e72ea0e61d5f752fbd66c5512ce46e70aff9953215caeb7c7a36def455af711a7a914eaaabc721e193ba76a65abd1709f165a83793f511608c299c3016604b86617c4ef19bec017c972a36f0cded3e1a2d128927644b70cabedc912354897f4810f9fc2c8119fd4589dd32c8c10ed47df368db58c29b899c91edbbb3e4541a0da13b245a94da07990be4821ed77e47f8a0ae9e46e85a65afa5dedd