*.psom.rldatix.com

- RLDATIX NORTH AMERICA INC. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:20:cd:eb:a4:b9:92:87:5b:73:84:aa:b1:3b:d5:6c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RLDATIX NORTH AMERICA INC.

Organization: RLDATIX NORTH AMERICA INC.
State / Province: Ontario
Locality: Toronto
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:20:cd:eb:a4:b9:92:87:5b:73:84:aa:b1:3b:d5:6c
Serial Number (int): 2828786054609770524212836808039060844
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a4:5f:aa:ee:89:76:07:2d:59:26:a3:04:89:df:72:77:59:4f:c6:f4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 53:04:fa:1b:de:db:ac:a4:1d:a6:73:9f:d8:61:e3:a2:ce:ea:00:77
Fingerprint (sha256): 56:97:84:eb:ed:ac:a8:a1:7c:59:22:7e:05:43:3a:2a:24:9d:05:87:71:5f:85:25:19:97:c5:1f:e3:9b:7d:51

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.psom.rldatix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.psom.rldatix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.psom.rldatix.com

Other certificates including the domain name rldatix.com

(limited to 100 certificates)
resources-uk.rldatix.com
www.rldatix.com
eu-status.titan.email
eu-status.titan.email
san2074.cdntwrk.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
eu-status.titan.email
san2074.cdntwrk.com
rl6-hosting-status.rldatix.com
*.rldatix.com
eu-status.titan.email
san3265.cdntwrk.com
*.rldatix.com
*.srm.rldatix.com
rl6-hosting-status.rldatix.com
eu-status.titan.email
eu-status.titan.email
www2.rldatix.com
rl6-hosting-status.rldatix.com
san3265.cdntwrk.com
san2369.cdntwrk.com
san1840.cdntwrk.com
san3140.cdntwrk.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
rl6-hosting-status.rldatix.com
san2171.cdntwrk.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
rl6-hosting-status.rldatix.com
san1462.cdntwrk.com
rl6-hosting-status.rldatix.com
rl6-hosting-status.rldatix.com
www2.rldatix.com
securelink.rldatix.com
*.rldatix.com
rl6-hosting-status.rldatix.com
*.rldatix.com
*.psom.rldatix.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
rl6-hosting-status.rldatix.com
san2372.cdntwrk.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
san2525.cdntwrk.com
san2369.cdntwrk.com
events.rldatix.com
eu-status.titan.email
san2522.cdntwrk.com
san332.cdntwrk.com
san944.cdntwrk.com
san1633.cdntwrk.com
eu-status.titan.email
san540.cdntwrk.com
*.rldatix.com
www.rldatix.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
rl6-hosting-status.rldatix.com
*.rldatix.com
rl6-hosting-status.rldatix.com
san2171.cdntwrk.com
eu-status.titan.email
san3205.cdntwrk.com
san1633.cdntwrk.com
rl6-hosting-status.rldatix.com
san2522.cdntwrk.com
san1927.cdntwrk.com
*.rldatix.com
san3204.cdntwrk.com
san3140.cdntwrk.com
san3000.cdntwrk.com
san2153.cdntwrk.com
san3264.cdntwrk.com
eu-status.titan.email
san3204.cdntwrk.com
san1840.cdntwrk.com
rl6-hosting-status.rldatix.com
www2.rldatix.com
rldatix.com
san432.cdntwrk.com
san603.cdntwrk.com
san3264.cdntwrk.com
eu-status.titan.email
san2153.cdntwrk.com
san1250.cdntwrk.com
*.srm.rldatix.com
eu-status.titan.email
bouncexdemo.ufcontent.com
rlus.rldatix.com
*.psom.rldatix.com
san2372.cdntwrk.com
resources-uk.rldatix.com
eu-status.titan.email
san1927.cdntwrk.com
eu-status.titan.email
rl6-hosting-status.rldatix.com
san3141.cdntwrk.com

Certificate

The complete raw certificate details for *.psom.rldatix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfZKUrJUHVWugcGMuByD
mJ4uhF1RWAg0bJQwVYx155l0JKMH5e2cGi7Uz487lxop8FNtmz8I6Cc8VV00gnQ8
mwaFCam4FFLMBdLLykignztp2Uxw4gQAcy5Q+cEGZL+q3oYQ0dRTPqg38ChsqS24
tSNbsmcGSJ+hGb3xQsPT9nKd2RfX+BJvUKG1KCOvFC4UeKIhlYkoFY4MJA5fxvko
INjn+8z8L6RyUTy2YSi9HyNS5mLtT8uV3qP/bGPKtRE6ooPl4n+1+KYr97v5FNtr
lEb6i9q0DJ1gVz/7TWbm01kepEmFl7NpvGwD19i5H9w9Imj6n9+hOIYuPHa3/H9h
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2828786054609770524212836808039060844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLDATIX NORTH AMERICA INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.psom.rldatix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21960677044579211892130541479569814867793387242728086943385512599705765826334683654849951327111976576577769644014932723436366652652174994510564356277030230471007962085000329975533094491380128516277630135144763662566892163153632998533145664607902201475665857986251440549075782521455142347464948655094792032671240968709087769723940185289243900038874274093624959075362358287248494902522088139448131298629016550170235089082121998600428510337006207615096360080780160525443560221088781764956600642385532993429955745032952710122647025138595111010668542851390212291072851575528949522512031462270424190030758055204610614714701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a45faaee8976072d5926a30489df7277594fc6f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psom.rldatix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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