*.agi.com

- Analytical Graphics Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:5d:d5:14:79:98:e5:a6:94:8c:e3:21:01:83:a0:8c was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Analytical Graphics Inc

Organization: Analytical Graphics Inc
State / Province: Pennsylvania
Locality: Exton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:5d:d5:14:79:98:e5:a6:94:8c:e3:21:01:83:a0:8c
Serial Number (int): 3145661374854926214100453394626093196
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:cc:43:a9:fd:a5:67:82:04:47:1e:42:6b:e9:6d:af:13:ac:3d:e4
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9d:eb:75:63:8c:9e:42:a9:25:84:b6:46:e0:77:0a:97:da:f6:72:25
Fingerprint (sha256): 32:a8:c2:de:4c:42:57:93:d8:90:8e:a4:a8:db:ab:44:82:5d:8a:0c:2b:02:02:6c:5c:3b:74:51:fa:dc:11:73

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.agi.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.agi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agi.com
sdfuseappdbstaging01.agi.com
sdfuseappstaging01.agi.com
sdfusesedsstaging01.agi.com
sdfuseproxystaging01.agi.com
servicesstaging.agi.com
agi.com

Other certificates including the domain name agi.com

(limited to 100 certificates)
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
san-15-s13.tlsprovisioning.exacttarget.com
*.agi.com
communications.agi.com
*.agi.com
communications.agi.com
*.agi.com
links.agi.com
mail.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
www.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
links.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
*.agi.com
links.agi.com
*.agi.com
*.agi.com
communications.agi.com
communications.agi.com
communications.agi.com
communications.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com
links.agi.com
*.agi.com
*.agi.com
*.agi.com
links.agi.com
*.agi.com
communications.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
*.agi.com
communications.agi.com

Certificate

The complete raw certificate details for *.agi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAves2643M+iH3eQfqhsVa
Y3B165B5EARSCBiUXHm31rKqd3V5Gy9GDmPmw8QMCNYCB6hCzgcoU5oZkrnQphIc
mgwWkuOVAFnCXtOqaH8ra+4N+KVBnCeOZIzHRxMHDVmT/Y9QGx/GyoN9hT4SvF1n
/+ghT/D0JVNYR6MYY/96NZ0h8rTshtEtY9DStoXlPQNVZ8BbSbYvPhiJmq5CSGtu
W7e0NNzghZhvBiluYruGSM/p3PD6zu96CkXGxqaPaYYN6Gip5z1AtFN164v4+WR6
MV9YSsOqGniCLZmSTEPnSdVR6mbzi4+eUkpe0a/Xa9JLii6RWsytTrI5z5AeNMeE
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3145661374854926214100453394626093196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Exton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Analytical Graphics Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.agi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23975028247154231679505864235596695670132562416142495078970003519955373945030551309807084393311222409182612731730980049197481944031198332228179369436308972266450200684491330494329331019802959980921829159450417925016073396229759633831230457789595320555369463911208382938428475513164099364711756092354829234141100004538328522974161149655913414627763792107519754799197363534557901959021286473127884513505251258776789920633181131306604788600319792189480932668091990101748017648149282440003722670395487040004464117302499029834628113832268083800082181536697787278867139660530055219391658651122268594680344516917022146659389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18cc43a9fda5678204471e426be96daf13ac3de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfuseappdbstaging01.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfuseappstaging01.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfusesedsstaging01.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfuseproxystaging01.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesstaging.agi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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