portal.starstictg.s-3.net

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 12:30:16 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=cdz0IZPGhJfCoj3qV2hN/45VHCM58fk5,CN=portal.starstictg.s-3.net,OU=GT28943228+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:30:16
Serial Number (int): 1191958
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 39:4b:c7:eb:9a:06:6b:c1:49:f6:a5:1a:4f:33:a7:4c:54:9f:89:d7
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 31:8e:ce:8b:5c:61:82:38:57:77:cf:a3:0b:0b:b9:d0:a6:02:b0:53
Fingerprint (sha256): 3b:fd:de:21:e9:6a:3c:f1:40:a5:76:8b:51:d7:77:03:1d:8b:eb:c6:c3:12:7b:83:a9:f7:32:f3:bd:a7:22:2b

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate portal.starstictg.s-3.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.starstictg.s-3.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.starstictg.s-3.net

Other certificates including the domain name s-3.net

(limited to 100 certificates)
meepp.s-3.net
consumer.uat.s-3.net
epr.uat.s-3.net
remote.s-3.net
instruments.qa.ncs.s-3.net
mthelp.survey.uat.s-3.net
hcupcdow.uat.s-3.net
external.sharepoint.s-3.net
*.s-3.net
ncireb.survey.s-3.net
hipsie.s-3.net
prs.s-3.net
member.mis.s-3.net
archive.ncs.uat.s-3.net
ms-registry.uat.s-3.net
ncsarchive.s-3.net
surveys.qa.hpda.s-3.net
external.sharepoint.s-3.net
survey.nioshminer.s-3.net
psotracking.s-3.net
external.sharepoint.s-3.net
psotracking.s-3.net
ncsarchive.uat.s-3.net
citrix.s-3.net
psotracking.s-3.net
mts.meps.s-3.net
reports.narcrms.s-3.net
betracking.qa.s-3.net
external.sharepoint.s-3.net
instruments511.ncs.s-3.net
ms-registry.s-3.net
citrix.s-3.net
sups.survey.s-3.net
sisters.survey.s-3.net
five9hub.uat.sups.s-3.net
ncireb.survey.s-3.net
testpsotracking.s-3.net
tms.medpac.s-3.net
sups.survey.s-3.net
sftp.s-3.net
sisters.survey.s-3.net
ahrq-pts.s-3.net
sisters.survey.s-3.net
*.s-3.net
hdss.uat.s-3.net
betracking.qa.s-3.net
uat.epr.survey.s-3.net
service.gulfstudy.uat.s-3.net
remote.s-3.net
testpsotracking.s-3.net
epr.survey.s-3.net
pso.uat.s-3.net
meps.uat.s-3.net
store2.s-3.net
tricare.ncidceg.s-3.net
remote.s-3.net
service.gulfstudy.uat.s-3.net
tms.medpac.s-3.net
sss.survey.s-3.net
survey.sups.uat.s-3.net
portal.starstictg.s-3.net
store2.s-3.net
five9hub.sups.s-3.net
sisters.survey.s-3.net
piv.citrix2.s-3.net
remote.s-3.net
hcupnet.uat.s-3.net
hdss.s-3.net
archive.ncs.s-3.net
qa.ncireb.survey.s-3.net
ghatest.s-3.net
datatesting.hdss.s-3.net
hcupcdow.uat.s-3.net
proposals.starstictg.s-3.net
sitessurge.s-3.net
actgpmc.qa.s-3.net
member.starstictg.s-3.net
portal.starstictg.s-3.net
ncscit.s-3.net
consumer.uat.s-3.net
tricare.ncidceg.uat.s-3.net
five9hub.sups.s-3.net
surveys.hpda.s-3.net
sftp.s-3.net
proposals.starstictg.s-3.net
survey1.sisterstudy.s-3.net
surveys.hpda.s-3.net
member.starstictg.s-3.net
tms.medpac.s-3.net
medsunrr.s-3.net
vpn.s-3.net
tricare.ncidceg.uat.s-3.net
vwb.ncs.s-3.net
nhqrnet.uat.s-3.net
mthelp.survey.s-3.net
conskills.s-3.net
proposals.starstictg.s-3.net
psotracking.s-3.net
sups.survey.s-3.net
ncsarchive.s-3.net

Certificate

The complete raw certificate details for portal.starstictg.s-3.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1191958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-15 16:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-02 16:41:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdz0IZPGhJfCoj3qV2hN/45VHCM58fk5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT28943228'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.starstictg.s-3.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 616071789172635440010705464585131668808965699662615494114049009690090647950594675014623548282777740794608835003338881542857679715581204772739093113575287285297291749812970327924813029584473006585047534326362138801122335866878017784248692323116933387795898724249180905164174002253744629682429068682139094373875356175359080129726752950514770612219604179805447711185292952605936030069910069987071233856108333279446431359073261468299831392735745552288125142804681589000513078174291397810069491189605571645526089516175648006654982677403794821419291624762768918462282500125523744411796054750351090729151804195398545541172609189647331751397944702371319931775862121182319491499322683867706169581284876508223043809071961709956697157485769133556756409632383726767271186495766119783239531856798558223163751416329134322123383250836815654455353143516681185307415032437525777105476452060631861140650254689100364879681754109578350052957345179151530598633337342581907467486661572562200861350585076793541251687492349090852835451373981569691319182277084766639887740502627146666870914429275407532660825502178412013923466480842847123174490354264593806376179545600678558249561726444029352763852510915319733456208465410140402536740827489193116353722028079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.starstictg.s-3.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							394bc7eb9a066bc149f6a51a4f33a74c549f89d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b255c7371aec650c583e05193565581a63987bc329a55e580e28a7a7ba96b3e27c8b9f34070e3cd6f5865fe0246f6f77c3b20829dbc1cb3dd7cd6d7ce511a02cf819cac944c4660945fb72bb845d414b0bfce5859c05ff273445d10e3c43db030e3a8014729d5fa7e1a74e306b5cb3d022140a451d42f9e3e80e113935196628f48ec3988a05798fa90331e54f944e120bce261bb78235f9cdbba04e36373f929251090383c594f95647198a17e334a560c424d12571693989ffe3eca76f511fd6f0940d4548cbade0346b8eec90027cf81a4a28cdb1d9203d8a287a51fc6b8108670b87ccb00883316ecb408195c7806ff994cb97522276bf321d2986ac37f0