go.fticonsulting.com

- FTI Consulting Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:c8:6a:73:34:5e:ce:9d:69:4d:0e:8f:8c:4e:93:85 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FTI Consulting Inc

Organization: FTI Consulting Inc
State / Province: Maryland
Locality: Bowie
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c8:6a:73:34:5e:ce:9d:69:4d:0e:8f:8c:4e:93:85
Serial Number (int): 13003670396635719848279870866868573061
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:9a:e4:b6:d7:c7:be:87:00:02:ec:da:18:b0:af:d9:c7:de:c6:d5
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 20:71:ce:a1:7a:2a:a3:ea:31:20:13:83:a5:95:b1:09:9e:87:5c:f7
Fingerprint (sha256): 31:09:13:e6:0b:5f:90:23:3e:ee:4b:36:ef:f7:46:ba:80:cb:4c:a0:7e:b6:14:26:b7:6a:b0:24:ca:72:63:14

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate go.fticonsulting.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.fticonsulting.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.fticonsulting.com
go2.fticonsulting.com
goint.fticonsulting.com
gocb.fticonsulting.com

Other certificates including the domain name fticonsulting.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
FTIHealthcare.fticonsulting.com
redssl01.fticonsulting.com
preferencecenter.fticonsulting.com
preferencecenter.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
FTIHealthcare.FTIConsulting.com
remotesupport.fticonsulting.com
si-scdev.fticonsulting.com
voltage-pp-0000.fticonsulting.com
ftiatlas.fticonsulting.com
amail.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
si-scqa.fticonsulting.com
remotesupport.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mail.fticonsulting.asia
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mail.fticonsulting.com
fti-folio.fticonsulting.com
tracking.fticonsulting.com
go.fticonsulting.com
sharena.fticonsulting.com
fticonsulting.com
awdev.fticonsulting.com
mailwest.fticonsulting.com
fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
mailwest.fticonsulting.com
ecg.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
shareeu.fticonsulting.com
annssl01.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
wsus1.fticonsulting.com
mail.fticonsulting.com
www.passle.net
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
ftishare.fticonsulting.com
azuse2idp01.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
ssluk.fticonsulting.com
docanalytics.fticonsulting.com
maileast.fticonsulting.com
travel.fticonsulting.com
gofti.fticonsulting.com
go.fticonsulting.com
services.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
ashmail.fticonsulting.com
ftiatlas.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
rmail.fticonsulting.com
ftiatlas.fticonsulting.com
cdmobile.fticonsulting.com
FTIHealthcare.FTIConsulting.com
leapfrog-ssl-14.gcs-web.com
ssleast.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
www.passle.net
go.fticonsulting.com
go.fticonsulting.com
ftiatlas.fticonsulting.com
mailwest.fticonsulting.com
voltage-pp-0000.fticonsulting.com
www.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
si-scdev.fticonsulting.com
cdmobile.fticonsulting.com
cms1.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
csa.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
voltage-pp-0000.fticonsulting.com
mail.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
preferencecenter.fticonsulting.com
remotesupport.fticonsulting.com
ftiatlas.fticonsulting.com
maileast.fticonsulting.com
async.fticonsulting.com
ftihealthcare.fticonsulting.com
vidyo.fticonsulting.com
analytics.fticonsulting.com
FTIHealthcare.fticonsulting.com
dr.fticonsulting.com
leapfrog-ssl-14.gcs-web.com
events.fticonsulting.com
remotesupport.fticonsulting.com
maileast.fticonsulting.com

Certificate

The complete raw certificate details for go.fticonsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13003670396635719848279870866868573061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bowie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FTI Consulting Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.fticonsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797854899314076680944436832155747076614748692360376675739981349722157064155109260892654822374851015393105599221814299949341900399348421145766779756229780074252211032319714658017092388113035914397281391773861686070254938616057585206102819705527834796552252823137513576165232494592698432135492538976988670720098427023176010500342624744983649390609985311457303349104951324032892801852380807744753912646208072913032641795907212592099867149028489022745934213234057227787533630094722729466061215253979163550963646489111494524340588203646251145262407221920365114369595786656226366544268361301805892697675754214663419855637788538450822754254197700718693079291469328408662517166866876708016149973866415699092138353385665158768342877923162706715729308187238724991777707236529706631990053323623145402701192663384202624863605668220168033029897690257742458906869891640042175239413387222113561484099429831754478909417685413005961622028885291660485391543439027165749775483903610029118204324358068401234150055635648217052279918896478317555305217691713074377569996063223709132438979379616607311159797027556899394579135690169821978250477699881265445481916436068467711760231376668886710950092414778923329574781930040631138052489801946523499205403470399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							119ae4b6d7c7be870002ecda18b0afd9c7dec6d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goint.fticonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocb.fticonsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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