expwaye.ap.logicalis.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:76:41:23:71:09:1b:96:40:ed:ee:f9:c5:d2:d1:b3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=expwaye.ap.logicalis.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:76:41:23:71:09:1b:96:40:ed:ee:f9:c5:d2:d1:b3
Serial Number (int): 1943240189684767608673609282267304371
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ff:fc:ec:69:d2:25:9d:b0:45:0c:9c:e1:b9:c2:bd:c8:92:b1:7a:88
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0e:d0:56:3c:2e:b0:46:67:35:94:aa:16:2a:ff:96:29:3c:ee:d3:86
Fingerprint (sha256): 44:fe:f2:e8:e7:58:f1:d5:77:f4:64:4c:c6:d2:7f:61:00:c6:72:50:3a:82:14:c6:b5:35:18:92:47:6a:16:65

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate expwaye.ap.logicalis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expwaye.ap.logicalis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expwaye.ap.logicalis.com

Other certificates including the domain name logicalis.com

(limited to 100 certificates)
ucjgedgecluster1.us.logicalis.com
ucjgedgecluster1.us.logicalis.com
br9laexpecluster01.la.logicalis.com
dvsssc01.gb.logicalis.com
mail.la.logicalis.com
sts.za.logicalis.com
blog.la.logicalis.com
*.us.logicalis.com
portal.logi-call.co.za
gw.optimal.video
hybrid.us.logicalis.com
ucedgecluster1.us.logicalis.com
cas.uk.logicalis.com
mobility.au.logicalis.com
controlpanel.us.logicalis.com
expwaye.ap.logicalis.com
mail.uk.logicalis.com
mail.la.logicalis.com
hybrid.us.logicalis.com
mail.la.logicalis.com
*.au.logicalis.com
luna.gb.logicalis.com
www2.uk.logicalis.com
*.us.logicalis.com
*.es.logicalis.com
sbc03.za.logicalis.com
recursos.es.logicalis.com
servicedesk.la.logicalis.com
svr-oh-ccm1.us.logical.com
portal.logi-call.co.za
*.us.logicalis.com
webvpn.us.logicalis.com
nvisage.logicalis.com
dvsssc01.gb.logicalis.com
hybrid.us.logicalis.com
*.mscrm.uk.logicalis.com
controlpanel.us.logicalis.com
cas.uk.logicalis.com
*.mscrm.uk.logicalis.com
*.ie.logicalis.com
ucedgecluster1.us.logicalis.com
quad.logicalis.com
uccorecluster1.us.logicalis.com
bellevuedev.us.logicalis.com
shop.us.logicalis.com
*.us.logicalis.com
*.ie.logicalis.com
recursos.es.logicalis.com
quad.logicalis.com
dvsssc01.gb.logicalis.com
svr-oh-cups1.us.logical.com
UCCOLLABEDGE01.us.logicalis.com
*.la.logicalis.com
www.logicalis.com
recursos.es.logicalis.com
nvisage.logicalis.com
sip.us.logicalis.com
fs.us.logicalis.com
sar-dc-cmee.la.logicalis.com
blog.es.logicalis.com
nvisage.logicalis.com
dashboard.us.logicalis.com
secure0004.hubspot.com
imagine.la.logicalis.com
*.us.logicalis.com
ucjgedgecluster1.us.logicalis.com
exchange.au.logicalis.com
*.es.logicalis.com
*.us.logicalis.com
blog.es.logicalis.com
sentry.uk.logicalis.com
ucedgecluster1.us.logicalis.com
mail.uk.logicalis.com
*.es.logicalis.com
*.us.logicalis.com
beta.nvisage.logicalis.com
uccorecluster1.us.logicalis.com
portal.us.logicalis.com
sip.us.logicalis.com
slgexc1.uk.logicalis.com
owa11.us.logicalis.com
ssl.logicalis.com
*.us.logicalis.com
sap.la.logicalis.com
meetings.uk.logicalis.com
expwaye.ap.logicalis.com
*.ppmscrm.uk.logicalis.com
www.logicalis.com
ucjabguest01.us.logicalis.com
dvsssc01.gb.logicalis.com
expwaye.ap.logicalis.com
*.au.logicalis.com
www2.uk.logicalis.com
mail.us.logicalis.com
svr-oh-cups1.us.logical.com
servicedesk.la.logicalis.com
webvpn.us.logicalis.com
svrvm-oh-ucn1.us.logical.com
svr-oh-ccm1.us.logical.com
bellevuedev.us.logicalis.com

Certificate

The complete raw certificate details for expwaye.ap.logicalis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmJGky7O1Jv8x3/Qs4uL
xribShSezB+5GwEmg975AxQFQ1XLGyzPrh8wmsZ535WRD0PKi1cKF/ilgcYaoM6N
7Odliw0ORR8C8g099zaGwCZ7WPafOAUrjWnCwOnILej/jQQiRFLqYvOVlyRVEK1B
tHLn5fiAWj6q5YJaVLJh9uRNHltgBZ7DMvHsH2me90bsLVhKkwIEndbKbbz5Uc9T
wEKHfJAq6MAqrUHH7IY6k37zvqBqlNNV7PLPlX4hfqixoqkQnfiKSYL8nWDNKDN0
9RqymIobH9lThLnXQYaqw1yCY0xpiQ8d7w8QhYyQ1A7/e5P8s6zP1+SNRh3aBBwP
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1943240189684767608673609282267304371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expwaye.ap.logicalis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22013926609731731776155105194657490617441743989424493369569309047631821472922365749974781496872846174904321607948493447717877981146415194839812306113798752807825341704678673023889742410258692595557698461586478211036389316535241207239473220150253570256930808439214797031204608518364957874970969070154818701531408636537725029583672092784930880216026044253559069399482060392623357649732228639954348462633362065603550991974200925122012631725789119386419398897152682816700134061415247717756887596215313511815018076059409514472859048007911014762100792479514867121593650216318736283831387380343533739706061439266099272879969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fffcec69d2259db0450c9ce1b9c2bdc892b17a88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expwaye.ap.logicalis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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