tecnet.tecolote.com

- Tecolote Research Inc. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:a9:8d:80:3f:26:65:17:c7:81:12:6f:27:c8:cc:e5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tecolote Research Inc.

Organization: Tecolote Research Inc.
Organization unit: Corporate
State / Province: California
Locality: Goleta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a9:8d:80:3f:26:65:17:c7:81:12:6f:27:c8:cc:e5
Serial Number (int): 14172648107444433507180483540446399717
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: db:5d:34:49:87:3b:01:40:c5:da:57:d8:24:09:86:1e:85:f4:91:22
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 81:2e:54:fe:93:5e:aa:6e:52:14:87:36:51:30:32:93:18:b4:0a:95
Fingerprint (sha256): 4a:bc:03:d3:5c:47:fe:69:eb:cf:65:01:4c:95:39:8a:4e:bb:ba:b3:8c:65:6e:51:31:3c:41:29:21:2c:2b:aa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate tecnet.tecolote.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tecnet.tecolote.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tecnet.tecolote.com

Other certificates including the domain name tecolote.com

(limited to 100 certificates)
mycenter.tecolote.com
accedge.tecolote.com
jiatmaint.tecolote.com
help.tecolote.com
demoweb.tecolote.com
www.services.tecolote.com
traveler.tecolote.com
tecolote.com
services.tecolote.com
time.tecolote.com
devweb08.tecolote.com
jiat.tecolote.com
helpdesk.premierpress.com
time.tecolote.com
ts.tecolote.com
jiatmaint.tecolote.com
servicedesk.tangerinelife.com
time.tecolote.com
demoweb.tecolote.com
ts.tecolote.com
cadetestweb.tecolote.com
tecnet.tecolote.com
portal.tecolote.com
devwebs.tecolote.com
servicedesk.tangerinelife.com
helpdesk.roadandrail.com
cadetestweb.tecolote.com
cadedemoweb.tecolote.com
iithelp.childrensmuseum.org
tecnet.tecolote.com
knws.tecolote.com
nightshadows.tecolote.com
www.tecolote.com
KnWS-WDC.tecolote.com
traveler.tecolote.com
servicedesk.galvestoncountytx.gov
www.services.tecolote.com
www.services.tecolote.com
www.services.tecolote.com
traveler.tecolote.com
KnWS-WDC.tecolote.com
www.tecolote.com
ts.tecolote.com
support.healthshareexchange.org
time.tecolote.com
devweb20s.tecolote.com
support.firsteagle.com
traveler.tecolote.com
demo.tecolote.com
tecnet.tecolote.com
EPM.tecolote.com
servicedesk.tangerinelife.com
time.tecolote.com
accedge.tecolote.com
servicedesk.tangerinelife.com
vdi.tecolote.com
portal.buyautopartsonline.shop
serviceportal.tecolote.com
view.tecolote.com
communities.tecolote.com
lyncweb.tecolote.com
ts.tecolote.com
traveler.tecolote.com
eschedules.tecolote.com
cadedemoweb.tecolote.com
dev.tecolote.com
accedge.tecolote.com
time.tecolote.com
timetest.tecolote.com
lyncweb.tecolote.com
trac.tecolote.com
trac.tecolote.com
sni.cloudflaressl.com
tecnet.tecolote.com
ts.tecolote.com
tecnet.tecolote.com
traveler.tecolote.com
support.healthshareexchange.org
helpdesk.plan-roa.org
www.services.tecolote.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
trac.tecolote.com
servicedesk.tangerinelife.com
www.tecolote.com
help.tecolote.com
tecnet.tecolote.com
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
tecnet.tecolote.com
portal.buyautopartsonline.shop
cadetestweb.tecolote.com
tta.tecolote.com
traveler.tecolote.com
KnWS-WDC.tecolote.com
servicedesk.tangerinelife.com
nightshadows.tecolote.com
CWA.TECOLOTE.COM
jiatmaint.tecolote.com
servicedesk.tangerinelife.com

Certificate

The complete raw certificate details for tecnet.tecolote.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0b0TUIm84rHzvgZ5HOC
+hZWpzgHd56NUPR+fPSw2ftaRYeZMN+D+hqrMd4B1dLpaf5eptBCs9EYMSwPsvdN
eh7FZ8F8swIkwlFLqFIjYXtPhy6OBwZC60ZOmYwIjo12j97lGFGBHBQwuizoh8eU
fHpuYX8pwE/COzekVnk0tCyzoSR2KxReTO3EyhgLOtdozsR0sU5Ryq2jor4UTngM
CHao8TKAZ8Ypz1BBhbJBiaYyVhbbwS/mMJJLN8iLgd+J6/OahMkFqhqwapB9mOhE
JY+zOZvFB6YckhptjsZQzl8ekOnNsMwTO/zGvIE2YSH23daimrX/nmVvtHYysSGt
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14172648107444433507180483540446399717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goleta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tecolote Research Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tecnet.tecolote.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19096972921166109003460710537868348247333753445722012228619913791622672174394855738291040823274355704721919607410776980466830100571953813981549966961958299459829815375999008478717803481331534149313788420893562612813979591139386865475057553950074894020534293898876803329878515861939322413087344989233382672820092236645429117188908798854689893187782255262548517675276894267280351055346495673988942339914993269256206235082377928226612147135287242942243081923615404910595998220625178114961959536649641561728197518310714733784723194163011878667164233423553235698311348599315577867042117853305670956687067298905159920365051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db5d3449873b0140c5da57d82409861e85f49122
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnet.tecolote.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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