vpn.datamatics.com

- Datamatics Global Services Ltd -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 48:12:e6:bf:60:48:e1:f2:2c:e2:e0:2a:97:d1:e0:28 was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Datamatics Global Services Ltd

Organization: Datamatics Global Services Ltd
Organization unit: IT Operations
State / Province: Maharashtra
Locality: Mumbai
Country: IN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:12:e6:bf:60:48:e1:f2:2c:e2:e0:2a:97:d1:e0:28
Serial Number (int): 95802557156554120456740130870789267496
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 77:a6:6d:1a:46:37:fd:f8:ed:1b:73:73:83:99:b5:26:a9:3f:8f:f5
Fingerprint (sha256): 37:fa:ba:1c:6b:d3:66:e0:da:c5:50:3c:e0:d1:a7:96:54:86:cf:e4:17:b0:b0:6c:cd:7d:20:fb:bc:16:34:07

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate vpn.datamatics.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.datamatics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corpvpn.datamatics.com
email.datamatics.com
mxmail.datamatics.com
vpn.datamatics.com

Other certificates including the domain name datamatics.com

(limited to 100 certificates)
trufare.datamatics.com
vpn.datamatics.com
careeaseproduct.datamatics.com
careease.datamatics.com
brand.datamatics.com
websitetest.datamatics.com
gosocial.datamatics.com
careeaseproduct.datamatics.com
webmail.datamatics.com
dx.datamatics.com
staging.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
events.datamatics.com
trubot.datamatics.com
blog.datamatics.com
careease.datamatics.com
cssgweb.datamatics.com
www.datamatics.com
www.pulse.datamatics.com
*.DATAMATICS.COM
esurvey.datamatics.com
trubot.datamatics.com
www.digital.datamatics.com
resource.datamatics.com
www.epm.datamatics.com
trubot.datamatics.com
brand.datamatics.com
digital.datamatics.com
webmail.datamatics.com
trubot.datamatics.com
owa.datamatics.com
careeaseproduct.datamatics.com
event.datamatics.com
iosmdm.datamatics.com
webmail.datamatics.com
prism.datamatics.com
cm.datamatics.com
io.datamatics.com
webmail.datamatics.com
trubot.datamatics.com
dx.datamatics.com
careeaseproduct.datamatics.com
trufare.datamatics.com
event.datamatics.com
tesmobility.datamatics.com
social.datamatics.com
www.pulse.datamatics.com
social.datamatics.com
owa.datamatics.com
social.datamatics.com
cssgweb.datamatics.com
owa.datamatics.com
careeaseproduct.datamatics.com
careease.datamatics.com
events.datamatics.com
www.pulse.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
io.datamatics.com
websitetest.datamatics.com
careease.datamatics.com
www.datamatics.com
social.datamatics.com
blog.datamatics.com
webmail.datamatics.com
websitetest.datamatics.com
digital.datamatics.com
trubot.datamatics.com
dx.datamatics.com
webmail.datamatics.com
www.datamatics.com
vpn.datamatics.com
careeaseproduct.datamatics.com
websitetest.datamatics.com
*.datamatics.com
tesmobility.datamatics.com
trubot.datamatics.com
careeaseproduct.datamatics.com
tesmobility.datamatics.com
vpn.datamatics.com
www.datamatics.com
www.datamatics.com
healthmonitor.datamatics.com
event.datamatics.com
digital.datamatics.com
www.digital.datamatics.com
www.pulse.datamatics.com
staging.datamatics.com
websitetest.datamatics.com
www.digital.datamatics.com
io.datamatics.com
vpn.datamatics.com
webmail.datamatics.com
dx.datamatics.com
io.datamatics.com
epm.datamatics.com
mobility-test.datamatics.com

Certificate

The complete raw certificate details for vpn.datamatics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgQP6f2ZrOP/Yx2/H2Re
m5gS05ob7C0RRErGKQoMC2lN2PiAghXfpwER0E2re+o1cWldTl9fDFAL4C35XeQV
rQy6VOlCV7Fg+jinfHldS2ilrqN0E+pyfoYXa/U29oZu1Dh7i2yYlIwU4Da4uBbA
ixfu2xP/N3EGhnLVWe+ggv4ePwO2M6R9JfTzh/wQMaXTYJv4YHdLHIh39EFmHmjt
EOXkh3cAl4mZXWd9sPGnrKyYHP/MmGnqBvQZrxm/R8csODvdBItc5UhAhTh2uWDc
vy+TJ0YdHvKUFyNBuAJly3EJoBeFqDUAyx0rXtgVC42tkJsC1JvdG9pHkDm1zPLq
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95802557156554120456740130870789267496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Datamatics Global Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.datamatics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22977374631629339634597601661435919130439644545290967724664665215905311720984966536518928703582213713962348297894291915203635336316765117834157003945564791236173529452401600349995984823891629892203199818222779086081364671431082095791365260564191192089981572956983928064097005978638787505355437304991205497474921625232705823115921810851977804239964918600254558230796866701920834641322553542079690075119453492493390065419404623150870252766085337269525986813377336315505585652665328569746350175098271603297729407394174316903059180623562624042375956753451975427924684033687070433486534287093500230914779285520559186831977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpvpn.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxmail.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.datamatics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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