*.versionone.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 03:30:2e:42:5a:d2:27:f2:ca:61:7c:fa:61:b9:2d:27 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.versionone.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:2e:42:5a:d2:27:f2:ca:61:7c:fa:61:b9:2d:27
Serial Number (int): 4237852484572627220194768301122465063
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 92:bb:41:70:1e:13:f8:de:73:8d:88:f9:07:e8:ee:98:92:c2:f9:a7
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 08:f0:4d:40:60:76:28:e7:eb:c4:d6:57:04:34:b2:3e:a2:64:76:01
Fingerprint (sha256): 53:8a:00:fd:37:b0:b4:1e:ee:e6:52:8e:04:50:44:36:af:e0:cb:de:3c:b6:bd:5f:0d:5f:71:09:ba:35:b5:e2

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.versionone.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.versionone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.versionone.com
versionone.com

Other certificates including the domain name versionone.com

(limited to 100 certificates)
stateofagile.com
support.versionone.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
versionone.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
*.versionone.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
blogs.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
*.leankit.versionone.com
ssl2.cdntwrk.com
smetrics.versionone.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
*.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.com
ssl2.cdntwrk.com
ssl4.cdntwrk.com
stateofagile.com
ssl2.cdntwrk.com
san2420.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ideaspace.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
san2420.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
san2210.cdntwrk.com
info.versionone.com
*.leankit.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.versionone.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
*.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
versionone.com
support.versionone.com
ssl2.cdntwrk.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
www.community.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
dev17331wed2prod.relevantize.com
versionone.com
ssl2.cdntwrk.com
ssl.cdntwrk.com

Certificate

The complete raw certificate details for *.versionone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/PAzY3BfHjahLFRXJTD
oK1nKK/2C+z0yDvOqhyPnQryandBGn7Nfj45BOsV+Rco76c0B7SxTA7BMyCIhvXK
6QgTZ0G/bL5J2xV8rWoa5Xci3v7WRLF0RSaDy9wLFP6ClaHJ0EwekTt0LVmukp/K
/AIVHDJuYFf4GYhZCtBQy7M9VZ/LH33RSsmLhW7ooaU8Ewo4wNvx4+oHbgN3ekt4
JL8RW3p62rIwOR+haDplmIk5Uyf16+4OxVC0egqdrMy5+860Nab4NQCc1dbVMKgt
zoMk4lgdAnKCYq6thZi00c3yQMDK64uVFSU3D0U+2+eHVq8W83khW9/NOZRqgNKC
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4237852484572627220194768301122465063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.versionone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19182183201367252007260689594379920575872169204046947674465586086799786855991803866119616615176876082932763972400539516938817746240809824372592170954585378440410751971590333221096606490693360971146302671883190687687585239602460918778253572262154408527966802783749639608981378803730967273366860036170972022555072654417667224789033446742569582089692745724776373668458680127511540482662665642045445321354816203871606239096261496326355058243612772996104366824541307387188600569787259084961269954099236217526509151591507210575852116596638746218893077768320909948889945808654218579136561084147276928191737893090036341179053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92bb41701e13f8de738d88f907e8ee9892c2f9a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versionone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versionone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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