mcvpnam.rsglab.com

- The Rocket Science Group, LLC -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:ce:e2:0c:0d:4c:50:62:12:fe:3b:f3:9e:34:bb:27 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Rocket Science Group, LLC

Organization: The Rocket Science Group, LLC
State / Province: Georgia
Locality: Atlanta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ce:e2:0c:0d:4c:50:62:12:fe:3b:f3:9e:34:bb:27
Serial Number (int): 11708021898561440011831945687517674279
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:ae:2f:3f:52:87:97:eb:a0:05:be:92:12:b6:1a:d5:17:d8:7e:a7
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 39:d8:81:86:4e:2d:f8:71:c9:93:6d:d0:83:4b:d6:33:7f:79:25:bb
Fingerprint (sha256): 33:51:95:66:19:11:f2:8c:77:ae:b0:c5:82:7c:c2:30:e4:1e:d4:d9:e7:54:04:a7:cb:5d:b4:6a:51:94:8a:51

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate mcvpnam.rsglab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcvpnam.rsglab.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcvpnam.rsglab.com

Other certificates including the domain name rsglab.com

(limited to 100 certificates)
bench.rsglab.com
creative-assistant.rsglab.com
link.getup-shoes.com
storybook.rsglab.com
prototypes.rsglab.com
prototypes.rsglab.com
wink.rsglab.com
storefront.rsglab.com
mns-ise.rsglab.com
sitespeed.rsglab.com
mcvpn.rsglab.com
vacation-feed.rsglab.com
creative-assistant.rsglab.com
sitespeed.rsglab.com
router.prod.fabric.rsglab.com
fp.rsglab.com
go-test.rsglab.com
*.platform.rsglab.com
jss.rsglab.com
storybook.rsglab.com
*.rsglab.com
git.rsglab.com
downloads.e-ceos.com.br
www.colornix.biz
omnicache.rsglab.com
incidents.rsglab.com
wink.rsglab.com
go-test.rsglab.com
jss.rsglab.com
rsgmc-az-scs.corp.mailchimp.co
experiments.rsglab.com
staff.rsglab.com
sitespeed.rsglab.com
storefront.rsglab.com
data.rsglab.com
git-stage.rsglab.com
router.prod.fabric.rsglab.com
pcm-ise2.rsglab.com
www.aidhon.com
crashplan-vault.rsglab.com
*.rsglab.com
fp.rsglab.com
vacation-feed.rsglab.com
sitespeed.rsglab.com
*.rsglab.com
vacation-feed.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
router.dev.fabric.rsglab.com
storefront.rsglab.com
mcvpn.rsglab.com
*.rsglab.com
data.rsglab.com
mcvpnsw.rsglab.com
router.dev.fabric.rsglab.com
mcvpn.rsglab.com
mcvpnam.rsglab.com
creative-assistant.rsglab.com
*.platform.rsglab.com
boo.pushstart.com.br
front-end.rsglab.com
creative-assistant.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
sawa-dev-4.rsglab.com
creative-assistant.rsglab.com
storybook.rsglab.com
crashplan-vault.rsglab.com
backpack.rsglab.com
status-stage.rsglab.com
transit.rsglab.com
prototypes.rsglab.com
transit.rsglab.com
vacation-feed.rsglab.com
mcvpnap.rsglab.com
*.platform.rsglab.com
router.prod.fabric.rsglab.com
app01.altimeter.prod.pcm01.rsglab.com
sitespeed.rsglab.com
sitespeed.rsglab.com
thesaurum.thetislive.com
mcvpn.rsglab.com
wink.rsglab.com
www.kyber.space
data.rsglab.com
editing-platform.rsglab.com
fp.rsglab.com
storefront.rsglab.com
experiments.rsglab.com
incidents.rsglab.com
fp.rsglab.com
sitespeed.rsglab.com
router.prod.dsfgcloud.rsglab.com
editing-platform.rsglab.com
bench.rsglab.com
front-end.rsglab.com
app.nomasfilas.cl
es-it.rsglab.com
test-management.mhntools.net
incidents.rsglab.com

Certificate

The complete raw certificate details for mcvpnam.rsglab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11708021898561440011831945687517674279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Rocket Science Group, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcvpnam.rsglab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802817436176442625912527430961484753495846235197486750094594445103086026634841742279814426659367007628832493247756045752791474525403275411921482272729705973697267240750582428951349435081553889016058209954749751536994322669076670591952938439297248203197288036306012767658792422271709326262260802303541198581628322362694036925451922441060479597539998175241196340731235499344588602853658188499736650284864895604855108651874288953000126949365037027581769466860551153734748811910530072121462033066395703068810157992417444077065520853571182485657583847372656825580536106496812063775605450888135704701390222657563930297956590059544549536656108214006876926744770079264141511710888782807182394717580014257888317271565528689831313945304634707622738399679067324789020728947676845223893939215922379769865797629970725588901962531159217582055181240926618503108167915009092500741070191028466318182111211106177083466991820779724076291790564450200843549897093513493080530253307841736650098125977019963930951481681351522193569451981222440174209472440112173298683855392549709175213158716868599035568455214784895307992234181207896058323516207764023290038810552827314492203884433417533501329684143383895599272934740114168072290417269098346651207380937803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22ae2f3f528797eba005be9212b61ad517d87ea7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcvpnam.rsglab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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