swd.rush-enterprises.com

- Rush Enterprises -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 04:80:cf:a0:8d:c7:78:a2:2c:bb:4b:26:82:08:e4:dc was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Rush Enterprises

Organization: Rush Enterprises
Organization unit: IT Operations
State / Province: Texas
Locality: New Braunfels
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:cf:a0:8d:c7:78:a2:2c:bb:4b:26:82:08:e4:dc
Serial Number (int): 5985737160204611904625606600719656156
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 1d:24:f8:70:79:88:1d:d5:17:ea:df:db:4c:c2:c9:01:2a:ec:c0:35
Fingerprint (sha256): 4b:6f:18:8c:6f:55:a6:2c:ae:0d:a1:52:14:f5:d7:a1:70:d0:e0:d8:e6:03:f4:4f:42:e5:89:78:fd:40:a4:00

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate swd.rush-enterprises.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swd.rush-enterprises.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swd.rush-enterprises.com

Other certificates including the domain name rush-enterprises.com

(limited to 100 certificates)
email.rushenterprises.com
chq-access.rushenterprises.com
email.rushenterprises.com
sappisbx01.rush-enterprises.com
ciscoise01.rush-enterprises.com
email.rushenterprises.com
email.rushenterprises.com
email.rushenterprises.com
swd.rush-enterprises.com
chq-access.rushenterprises.com
email.rushenterprises.com
chq-skypepool.rush-enterprises.com
*.rush-enterprises.com
chq-skypepool.rush-enterprises.com
swd.rush-enterprises.com
email.rushenterprises.com
email.rushenterprises.com
email.rushenterprises.com
email.rushenterprises.com
chq-skypepool.rush-enterprises.com
sappisbx01.rush-enterprises.com
email.rushenterprises.com
chq-access.rushenterprises.com
*.rush-enterprises.com

Certificate

The complete raw certificate details for swd.rush-enterprises.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6BqKbdeyWWzxu8e+msVp
TBwhNNq2OwX4kttFXbBEYy0wqFU3VnNZ6X5NpD01chaex+Q4IVKxU5fXCi33+nuD
TJW+LcfbnQB0KVZ6LqaLPeZB+c36kdOusMkttFTiAtkD5pwnhkOBls0r0U3JN4tD
WGBUn64LyOlISV4DwDXFUG+cHaJS7Assr+5YlMD1TORciRZUP7dmwacXGeD2H0nq
KycYnEb//lP1SBPvOKGLz+oDqI9P7iWuBJ+G4vOy3i28HkrLpQ3mjfrd+gnqnqrr
uTDZ9KepQ6wLcVqmqaoeCv6hDCkxF6Q6hs1hcMpd+wi1yneNWbrZtDof7vTBZV45
yu/tySSKW0B2afwhpx/GGZidaRnzfjraQQmA/4K7wxLwiHLxFzQILDQvODjozoLM
XdYRlcXrNiUKOqAWO3xXyq0TkqWI/Lkd0Z7qdGeRQk1ROrN0aIM8wsheqWcaCWfn
wQFhszC7lZn+rpFFhsrjlphzbhTv8F7S1JZ0BaOc9yWbRvoH5dyheMoh3RbodX3N
1pb4EJSRR12n+zX6T8H828rgAWGZI5PjGjDwxPgCa2hZoWeuqEc8yyidf8T9LFGb
UvTfj0rR+CUARFqCvgjlVkrgyl2V753A7WSFFghjr36WjA/s9JKLIvR+ZH99sG3F
wL0TgJ1JZpLLPEeQpKmLuz0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5985737160204611904625606600719656156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New Braunfels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rush Enterprises'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'swd.rush-enterprises.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946900379900379086015631724837874745563267851583675991372708742995665481275536472870272555690110673764023887680337899292290750930488304577021595230755849546031058167130396759133456662139904475027481321220168018181036314567809662741902610159327627586381531663773290271513047214513857021879085451921577157701968589173306178294516898659232017905844392383596583608565419717879817000984600330287828590967516084019808008976900128039710531209958875815143802729816944881276925998210957604514558053110358975799392294835857895508012546077232241043110009020426736766182419971017365961333423471712578794806549704804780651975416734332582105403162487239398331918853651706579629143280563571906927339304304069452740942926389263254589092767201806160830292545426325226698953510088682386370540053334372628586508095110134298893046105447705409229190137193777756922727673089513244092050242582195781271886582159611836160321803241457554843298120098443069844177416535176254635595434802221965632070101509476113270098916740946738866540526030235635011374832487511471062204587952129430471638571090047903461039680260813410461311020693388872940294829629185708444199097184123710364540472112862264790782539101397625960676108813935902321777920791904281291485776427837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swd.rush-enterprises.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024f784ca87fd3573af17c96184e72bae12bfb11d78f23da51a4de0f68b83daf7b401d019c69f2a0b6c8d91a896cc8439a70070f31fb99195b0d87dda46524c2019ba3790fcb6939b5d07dc4288bb433b02c8bd02fc3026ac12af5b82a9182f7936e86809537c49ac3267b9e0d7add8c1ce6f568890a0cc7af005431c0a362bddc7ba8fc424486fe82c3cfebf8d1ce09213ef73419e245e5c5400159605ce9ac8bffdddb3dad20dc2ede17ba8d09249808abc2df5f2132774664aacfba75e2fa4d019cce4767d6134b3cfd0d37181c58d8574548c131aee6bf9160ab67a1d53a81b800aaded2aa7522825b887a1b071a9f96dd3b5171ce200e1539592a1453a53