proposals.starstictg.s-3.net

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 15:d8:d6 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=m0/Wt3fX04u88lcCvaSLt9OeNZ3TyPNk,CN=proposals.starstictg.s-3.net,OU=GT71529806+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:d8:d6
Serial Number (int): 1431766
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 49:66:6b:7f:83:17:8c:65:f4:17:45:ad:38:e6:1d:d3:c7:d6:da:b6
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 38:26:9c:4b:10:89:5e:11:74:ea:a0:fb:e7:94:a3:ff:a1:1c:83:61
Fingerprint (sha256): 47:f1:22:1a:9b:0c:46:58:a7:2e:45:c7:99:f0:a1:fa:f5:ce:5d:a6:4b:a9:93:04:2e:09:7e:32:66:27:42:19

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate proposals.starstictg.s-3.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proposals.starstictg.s-3.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proposals.starstictg.s-3.net

Other certificates including the domain name s-3.net

(limited to 100 certificates)
meepp.s-3.net
consumer.uat.s-3.net
epr.uat.s-3.net
remote.s-3.net
instruments.qa.ncs.s-3.net
mthelp.survey.uat.s-3.net
hcupcdow.uat.s-3.net
external.sharepoint.s-3.net
*.s-3.net
ncireb.survey.s-3.net
hipsie.s-3.net
prs.s-3.net
member.mis.s-3.net
archive.ncs.uat.s-3.net
ms-registry.uat.s-3.net
ncsarchive.s-3.net
surveys.qa.hpda.s-3.net
external.sharepoint.s-3.net
survey.nioshminer.s-3.net
psotracking.s-3.net
external.sharepoint.s-3.net
psotracking.s-3.net
ncsarchive.uat.s-3.net
citrix.s-3.net
psotracking.s-3.net
mts.meps.s-3.net
reports.narcrms.s-3.net
betracking.qa.s-3.net
external.sharepoint.s-3.net
instruments511.ncs.s-3.net
ms-registry.s-3.net
citrix.s-3.net
sups.survey.s-3.net
sisters.survey.s-3.net
five9hub.uat.sups.s-3.net
ncireb.survey.s-3.net
testpsotracking.s-3.net
tms.medpac.s-3.net
sups.survey.s-3.net
sftp.s-3.net
sisters.survey.s-3.net
ahrq-pts.s-3.net
sisters.survey.s-3.net
*.s-3.net
hdss.uat.s-3.net
betracking.qa.s-3.net
uat.epr.survey.s-3.net
service.gulfstudy.uat.s-3.net
remote.s-3.net
testpsotracking.s-3.net
epr.survey.s-3.net
pso.uat.s-3.net
meps.uat.s-3.net
store2.s-3.net
tricare.ncidceg.s-3.net
remote.s-3.net
service.gulfstudy.uat.s-3.net
tms.medpac.s-3.net
sss.survey.s-3.net
survey.sups.uat.s-3.net
portal.starstictg.s-3.net
store2.s-3.net
five9hub.sups.s-3.net
sisters.survey.s-3.net
piv.citrix2.s-3.net
remote.s-3.net
hcupnet.uat.s-3.net
hdss.s-3.net
archive.ncs.s-3.net
qa.ncireb.survey.s-3.net
ghatest.s-3.net
datatesting.hdss.s-3.net
hcupcdow.uat.s-3.net
proposals.starstictg.s-3.net
sitessurge.s-3.net
actgpmc.qa.s-3.net
member.starstictg.s-3.net
portal.starstictg.s-3.net
ncscit.s-3.net
consumer.uat.s-3.net
tricare.ncidceg.uat.s-3.net
five9hub.sups.s-3.net
surveys.hpda.s-3.net
sftp.s-3.net
proposals.starstictg.s-3.net
survey1.sisterstudy.s-3.net
surveys.hpda.s-3.net
member.starstictg.s-3.net
tms.medpac.s-3.net
medsunrr.s-3.net
vpn.s-3.net
tricare.ncidceg.uat.s-3.net
vwb.ncs.s-3.net
nhqrnet.uat.s-3.net
mthelp.survey.s-3.net
conskills.s-3.net
proposals.starstictg.s-3.net
psotracking.s-3.net
sups.survey.s-3.net
ncsarchive.s-3.net

Certificate

The complete raw certificate details for proposals.starstictg.s-3.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1431766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-23 11:10:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-25 03:38:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm0/Wt3fX04u88lcCvaSLt9OeNZ3TyPNk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT71529806'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proposals.starstictg.s-3.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 915292531094012404714817560596118018563654706046794211270813938937958097164025193131378179243645710630506845589683756493175956790853206621730998510889156947725408798926579609527559105534401414602940107967928315413110278607764769970106862487384833137688281320772290664955088421753859090383438713185952561300027943781896817364672927084066278138362927742478031899294492881234634414656554113206354657389278615070760467293498934565087294436126784319477073094031876095935847317188037452293248157745273196689850598640502432071666362694654915202890346151705650906822038914584264180867088692287016490724880869585091389761995437097625255985288920843645362953208256891507530858557745800464410908355186206601402028774855115369888129127495326833649350197005508353926321354338271331680719644372361079227406143728315442238680105234927073798305244491306881276555802649116547596924607271360507914397748103560347802412643067611089607239001370834664252776713118849657292245127307932334787668172536067219687836582176518864520744166927713005395760118575340256165826336262737838511444858899586571997687477381270144221022484951754898581224258635787437608797688021865640361195823641850645619895932133175138292368112365526277895305124254248891078667171240983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proposals.starstictg.s-3.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49666b7f83178c65f41745ad38e61dd3c7d6dab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00be9d18297d82a28c79e3de61530a68f7853d1e45c2417104fe28d5e6529ae12927ae47501a864e7a59905d3255eb2a66f0b3ede6162dc66b1104969d5f80a04f34bb231c0eee499d71409a94ab2b854b8f67a5ea50a56edd6d25d9fb8ac16a0fa044e983f5ebf1d18c3ffa1019cb52a388f514a6a25e4d37f2c6cff58fe45dee22d2cd5aa93a924395ee70b7f69c37dcdd5d8f5a855416a5b762eaf3fb8f5b2cef8eccec063411b0006fb4850c86fd295416073764bd81fa83e1a26fd87ea2194301ca22879be46cb4aafbd9cccfd323ffe499b67e0eb85f0b0469c21e3f6e190b3a3d80b327fe116255ab7eb7bfe370eba141609d7dc5f3a935ca68fc6adbaf