tricare.ncidceg.s-3.net

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 08:36:cd:6c:7e:c6:83:aa:23:3c:6a:9a:f7:6c:1a:4d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tricare.ncidceg.s-3.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:36:cd:6c:7e:c6:83:aa:23:3c:6a:9a:f7:6c:1a:4d
Serial Number (int): 10918374486485608126424417767080598093
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:d8:0d:6b:64:06:4d:1f:2e:39:a4:74:5d:4b:c4:d6:99:c1:29:d2
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): a5:d6:03:e6:ff:51:05:cf:5f:7d:6b:3f:99:5b:fb:32:0b:27:3b:60
Fingerprint (sha256): 37:64:74:87:6f:97:ce:ca:70:ba:00:c7:66:32:3c:2d:83:14:32:0e:63:d8:0f:69:91:91:a9:6b:75:a6:a1:d3

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate tricare.ncidceg.s-3.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tricare.ncidceg.s-3.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tricare.ncidceg.s-3.net

Other certificates including the domain name s-3.net

(limited to 100 certificates)
meepp.s-3.net
consumer.uat.s-3.net
epr.uat.s-3.net
remote.s-3.net
instruments.qa.ncs.s-3.net
mthelp.survey.uat.s-3.net
hcupcdow.uat.s-3.net
external.sharepoint.s-3.net
*.s-3.net
ncireb.survey.s-3.net
hipsie.s-3.net
prs.s-3.net
member.mis.s-3.net
archive.ncs.uat.s-3.net
ms-registry.uat.s-3.net
ncsarchive.s-3.net
surveys.qa.hpda.s-3.net
external.sharepoint.s-3.net
survey.nioshminer.s-3.net
psotracking.s-3.net
external.sharepoint.s-3.net
psotracking.s-3.net
ncsarchive.uat.s-3.net
citrix.s-3.net
psotracking.s-3.net
mts.meps.s-3.net
reports.narcrms.s-3.net
betracking.qa.s-3.net
external.sharepoint.s-3.net
instruments511.ncs.s-3.net
ms-registry.s-3.net
citrix.s-3.net
sups.survey.s-3.net
sisters.survey.s-3.net
five9hub.uat.sups.s-3.net
ncireb.survey.s-3.net
testpsotracking.s-3.net
tms.medpac.s-3.net
sups.survey.s-3.net
sftp.s-3.net
sisters.survey.s-3.net
ahrq-pts.s-3.net
sisters.survey.s-3.net
*.s-3.net
hdss.uat.s-3.net
betracking.qa.s-3.net
uat.epr.survey.s-3.net
service.gulfstudy.uat.s-3.net
remote.s-3.net
testpsotracking.s-3.net
epr.survey.s-3.net
pso.uat.s-3.net
meps.uat.s-3.net
store2.s-3.net
tricare.ncidceg.s-3.net
remote.s-3.net
service.gulfstudy.uat.s-3.net
tms.medpac.s-3.net
sss.survey.s-3.net
survey.sups.uat.s-3.net
portal.starstictg.s-3.net
store2.s-3.net
five9hub.sups.s-3.net
sisters.survey.s-3.net
piv.citrix2.s-3.net
remote.s-3.net
hcupnet.uat.s-3.net
hdss.s-3.net
archive.ncs.s-3.net
qa.ncireb.survey.s-3.net
ghatest.s-3.net
datatesting.hdss.s-3.net
hcupcdow.uat.s-3.net
proposals.starstictg.s-3.net
sitessurge.s-3.net
actgpmc.qa.s-3.net
member.starstictg.s-3.net
portal.starstictg.s-3.net
ncscit.s-3.net
consumer.uat.s-3.net
tricare.ncidceg.uat.s-3.net
five9hub.sups.s-3.net
surveys.hpda.s-3.net
sftp.s-3.net
proposals.starstictg.s-3.net
survey1.sisterstudy.s-3.net
surveys.hpda.s-3.net
member.starstictg.s-3.net
tms.medpac.s-3.net
medsunrr.s-3.net
vpn.s-3.net
tricare.ncidceg.uat.s-3.net
vwb.ncs.s-3.net
nhqrnet.uat.s-3.net
mthelp.survey.s-3.net
conskills.s-3.net
proposals.starstictg.s-3.net
psotracking.s-3.net
sups.survey.s-3.net
ncsarchive.s-3.net

Certificate

The complete raw certificate details for tricare.ncidceg.s-3.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10918374486485608126424417767080598093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tricare.ncidceg.s-3.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756028010363840449584866040499617547694799544138271156635265737418913448692626043152288466368363212058954831863603806965436134724326756695902491900958596159002422709203342026853748710777016115832430555456839328106506298154279056112385797512689548816453969212136015924736387700175514730827186554587535418585472032015030979693702158218920240294969665301081466787451335541833155110351710286921379358876853208187836942774172692975615674513556901847912461512113134699492527874630609558933526309616008030079860810690812061339707355915243356867589668912506970047270634383679887457616448484121740332877442336424923804639749171420048055657935833830242962383494887879050342104854367001923255389916992161536709799840607737249699405741299873746532789729932198165738017130563460920825211096216305381786353966431639908839420897137531943738331209438126783363151174143489316934499665245708832330904476153148248329897716361613736692409040381513764226696226495041527128231325474048594322095636869380942687966793183911251414091925132354254799247676565580623342586785518361316024214192268020408624087132811709496268731415633759710368812899727786888306517555890363148720266936553977020798215737745282683588101126953847475042544780271561745579976082632191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d80d6b64064d1f2e39a4745d4bc4d699c129d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tricare.ncidceg.s-3.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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