*.prod.unifiedpost.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 11:16:0b was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=0PMY6qedkaO-50q9Y-AlCl/zso9-U8EY,CN=*.prod.unifiedpost.com,OU=GT29317767+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:16:0b
Serial Number (int): 1119755
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: bb:b0:47:18:de:66:19:be:f7:2c:89:79:ca:11:64:90:1f:f4:b3:0b
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 33:0b:11:80:3f:b7:b3:13:1b:51:04:1a:9d:39:d0:0d:ff:a8:d4:54
Fingerprint (sha256): 37:62:ba:d4:e7:cf:ad:bb:95:40:b1:a2:8e:df:1b:a0:73:f2:87:11:51:a5:09:9b:5d:57:01:8e:ac:03:bf:e2

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.prod.unifiedpost.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod.unifiedpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.unifiedpost.com

Other certificates including the domain name unifiedpost.com

(limited to 100 certificates)
iam.devel.unifiedpost.com
404.unifiedpost.com
maintenance.unifiedpost.com
unifiedpost.com
404.unifiedpost.com
tickets.unifiedpost.com
*.nxt.uat.unifiedpost.com
www.appcode.ro
ui-development.kpis.unifiedpost.com
*.unifiedpost.com
staging.unifiedpost.com
omnisnexus.fi
*.unifiedpost.com
aburto.jurix.cl
www.ezcallin.dk
*.nxt.uat.unifiedpost.com
tickets.uat.unifiedpost.com
staging.unifiedpost.com
*.nxt.uat.unifiedpost.com
unifiedpost.com
development.kpis.unifiedpost.com
www.bemote.global
eregistered.unifiedpost.com
kpis.unifiedpost.com
wofe.divarch.com
*.unifiedpost.com
iam.unifiedpost.com
ui.kpis.unifiedpost.com
unifiedpost.com
links.uat.myid-idp.unifiedpost.com
support.unifiedpost.com
*.nxt.unifiedpost.com
unifiedpost.com
hellogm-auth0.snnanalytics.com
*.unifiedpost.com
www.lupenews.tk
api.kpis.unifiedpost.com
*.nxt.unifiedpost.com
www.appcode.ro
app.1receipt.io
*.unifiedpost.com
unifiedpost.com
*.prod.unifiedpost.com
athena.meuportfol.io
versusversuum.com
*.nxt.unifiedpost.com
gbo.ondertekendienst.zetsolutions.nl
www.unifiedpost.com
admin.happily.ai
*.nxt.stress.unifiedpost.com
development.kpis.unifiedpost.com
*.nxt.unifiedpost.com
flexwork.fi
*.uat-iam.unifiedpost.com
digiinkoopaflever.unifiedpost.com
img.unifiedpost.com
*.nxt.stress.unifiedpost.com
app.strides.ai
www.unifiedpost.com
support.unifiedpost.com
www.declutterit.net
iam.uat.unifiedpost.com
qsp-0-10-11.qualified.io
networkconsole-dev.unifiedpost.com
passthebuck.io
www.ezcallin.dk
eregistered-uat.unifiedpost.com
*.uat.unifiedpost.com
www.unifiedpost.com
staging.unifiedpost.com
www.unifiedpost.com
app.test.veertly.com
gbo.ondertekendienst.zetsolutions.nl
unifiedpost.com
integrationportal-dev.unifiedpost.com
iam.uat.unifiedpost.com
servitec-all-in-one.com
unifiedpost.com
fmfeeds.eventfull-us.com
www2.unifiedpost.com
noteandgo.com
sell.kidsconsignit.com
unifiedpost.com
support.unifiedpost.com
iam.uat.unifiedpost.com
*.nxt.uat.unifiedpost.com
kpis.unifiedpost.com
iam.uat.unifiedpost.com
staging.unifiedpost.com
api-development.kpis.unifiedpost.com
gbo.ondertekendienst.zetsolutions.nl
idp.uat.myid-idp.unifiedpost.com
*.nxt.stress.unifiedpost.com
staging.unifiedpost.com
runtime.uat.compose.platform.unifiedpost.com
*.uat.unifiedpost.com
www.noahhayes.com
spinnaker.dw-iap.unifiedpost.com
www.mycase.tax
staging.unifiedpost.com

Certificate

The complete raw certificate details for *.prod.unifiedpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquP7xPpd3hQkm6daEwpm
SV8oU5Jo5jlBjxW83r6nQSTEAZU4hVk+Caqw5vr2sf2J2tIbG5FuAovk+KaevyZM
pcep+blQanw5GodeDEpTV/tXLY71UOiDRBS/vmdznHM0sHlUSaS/vyRPtgKCAA6j
4ZsTc6LBi48iwxeYtAPlfdd48rZy7sVxpOnUGHg2qSZTGBUVGe2SVTTHU+xt8qbm
SP/FWvgn4GARQJmMXy4VGXW+3hyTEcPtPY47zEV1tdvVKEdhNSyA/PMQl9TGWVlb
+BhcT9S03XXFww7nvRHaDDtmIoCp59XVkwmlym6d6utOJoHwiuNvA8b8HKWjXY+i
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1119755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-05 10:24:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-06 04:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0PMY6qedkaO-50q9Y-AlCl/zso9-U8EY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT29317767'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.unifiedpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21572934685511147599557259894748502075214924881799142263709292104528054177126428473351559444131541225911228504350414140253933983624724187476959129097300473884328168449389286665612066458151003459748316600962716473540359820234802087051966407740452054110586221280859172585768449585349858692673440090103250683127708978539261832342422539164927898468257325573800168186467398458448653749707730604097885626763299408797541682273735405044508684844312794071247425645933144055576907082470069337045838341841865365555928742244116190537996240119270229402526020634361377042758232354407971270555500630820692361597342309916891870634531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.unifiedpost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbb04718de6619bef72c8979ca1164901ff4b30b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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