azure-crmsupportpr.visionrt.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:7c:73:52:df:e4:42:f3:d6:cb:43:27:87:25:71:28 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=azure-crmsupportpr.visionrt.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:7c:73:52:df:e4:42:f3:d6:cb:43:27:87:25:71:28
Serial Number (int): 8621551828272668426391363977910513960
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 61:da:da:0f:b2:03:7b:df:7d:cf:2a:97:60:ef:14:ae:3d:04:f3:1c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 77:a6:f3:63:a8:38:9c:f3:92:b0:7f:8b:53:b0:74:54:b7:9f:4f:0c
Fingerprint (sha256): 36:05:b3:b2:50:3a:53:54:11:2f:da:2f:be:e4:36:d6:ee:ab:aa:ac:8f:4c:f7:b2:f8:bc:9b:54:b6:52:c2:b8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate azure-crmsupportpr.visionrt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azure-crmsupportpr.visionrt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

azure-crmsupportpr.visionrt.com

Other certificates including the domain name visionrt.com

(limited to 100 certificates)
azure-crmsupportliveprevious.visionrt.com
ithelp.visionrt.com
crmapipr.visionrt.com
azure-crmtest.visionrt.com
ithelp.visionrt.com
visionrt.com
azure-crmsupportpr.visionrt.com
azure-autocrmsupporttest.visionrt.com
azure-crmduolive.visionrt.com
sni11c16gl.wpc.edgecastcdn.net
exchange.visionrt.com
sni11c18gl.wpc.edgecastcdn.net
visionrt.com
visionrt.com
*.visionrt.com
sni1a5cegl.wpc.edgecastcdn.net
azure-crmsupporttest.visionrt.com
azure-crmportaltest.visionrt.com
azure-autocrmduotest.visionrt.com
visionrt.com
*.visionrt.com
*.visionrt.com
visionrt.com
azure-crmliveprevious.visionrt.com
azure-crmduotest.visionrt.com
sni1a5d0gl.wpc.edgecastcdn.net
sni11c14gl.wpc.edgecastcdn.net
azure-crmcustomerportaltest.visionrt.com
visionrt.com
apps.visionrt.com
azure-autocrmportaltest.visionrt.com
azure-crmapitestprevious.visionrt.com
*.visionrt.com

Certificate

The complete raw certificate details for azure-crmsupportpr.visionrt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSBg7IZJRaSn4cpT2yf
+p1d3rdxK4P2EJZv2bRc4hSgm7q/GBH76GmCEnbZIeZMLBSU+Yrt/HVxocznK3eM
u9l21POm10yeH8S4fYFwIOeKco+v1H7huxsjFwj2oOX3uP90ZshOocCbde9Ln44I
176G4mrYoLq5W9QX8sd5vrMC/HsQdUGsL2WutWcB+lTg+74hJQVUtpgqUYbuF1Wi
G9Nln7YkGQITpMu2KJLZyD6wTMTEPwO9M4hI6pHMz603lTBsk0cpDJpe0HZHc9lt
Cp/PU4uVgrHcPWuvwfPOZSjvQebOr22AYl/1qOTsenPXwaMDlcM+Llk0RiKOi4cC
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8621551828272668426391363977910513960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azure-crmsupportpr.visionrt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19293012927503672227798029987655696244433084947045732722290548882543346231078819423283613282218754837820112972942644544157817145989999314898179422147254529988882226323024176388188363058933349766273512684062593311008493725865051191182796416111157766323542752479707547405716134174560509989606799111254467194309408787201466034975165938709237718246393034490134573659451987909874858106906007124872289833835213479679430234525999591567767745663057230082414398015633109227058142373983967456323776473395263864304817135556671643041553905744588967526328889981576802198092564181674587287587792436960291030959213116026285401244293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61dada0fb2037bdf7dcf2a9760ef14ae3d04f31c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-crmsupportpr.visionrt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009daa64beda325f8165e6a6e7b9e33732a8657a01e44e4f38b3bc06a3468ac72abd517ebf52faeb76ee8684af8d0f855971330dd74504b46c7fab102ebb87cecc33eff26e49e5ced19e7e91b4ef38df1bfb64155ffd9c98bc6345376bd64064d8b478db5ade271b471caf8fa900c5d20f008d38d89f3fefd8c082d79fa3d2bd25da553b73ef393305b9dc9c724a9c226caaad3e0e72bb862053eb7e285ce2b2e954427500b524c330070ea8eb6a6d8b971f9734f96cb38b9c594ee508023b9256da94b7863781f8fd50702759cf96c368455c3cb849cee5e0fe02577d35ccc90687e539abdbead84efd2def485efd8f1dc1c8456f7494d848173c321d4bd36082debb6a8271d9dc07bf6dbba6bd9242bf0b5dbcb395bd2d399e3138c4e02f3c8c430f63d97247a2fbf7d0bbfaed0fac4f99d65359aab21e2366861de5441c869b3cc919688424df445e960ca01983d1d2e60ea1753fe7f51708e007bd08c2285be54d1f6a37cec2831f8d3b5979276986a6e8db9ac4570206882670362ad2224714dbf7dbc036d56800bd903c8663bf031d4808cad35a926a51115c2145db3f37e29eaf400003dd6d0a13ffb5f1ac5c67235534214ee2b04508fb74fd078caef25e21d090a392cc7e632ee7f30cd046e933c121ab43ae01633426c2374fcc4bbf16289102fb46560d992a3c039e7151cc84caff3f2f97b8cffd92ac53ee8b8792