pstesttmp.valmont.com

- Valmont Industries, Inc -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 68:92:42:31:c1:3a:7f:0a:ef:71:3f:f2:ce:bd:7f:27 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Valmont Industries, Inc

Organization: Valmont Industries, Inc
Organization unit: IS Network Admin
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Nebraska
Locality: Valley
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:92:42:31:c1:3a:7f:0a:ef:71:3f:f2:ce:bd:7f:27
Serial Number (int): 138999129483992464360283563233030012711
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): ae:d2:b9:c0:21:34:28:95:4a:34:41:84:b7:c1:c7:9c:db:46:0d:af
Fingerprint (sha256): 5b:d4:78:1d:1a:31:ea:85:05:ba:9c:2f:cb:3e:12:0b:76:9a:5a:d5:5c:bc:3f:f6:d5:38:d9:f2:0a:b5:6b:55

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate pstesttmp.valmont.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pstesttmp.valmont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pstesttmp.valmont.com

Other certificates including the domain name valmont.com

(limited to 100 certificates)
fsoma.valmont.com
securemail.valmont.com
valmont.com
valmontux.valmonttest.com
weblync-na.valmont.com
ps.valmont.com
stage.valmont.com
vendortest.valmont.com
vendortest.valmont.com
web.valmont.com
valmont.com
valmont.com
emeavpn.valmont.com
web.valmont.com
webs4b-na.valmont.com
fs.valmont.com
*.valmont.com
vo.valmont.com
fs.valmont.com
securemail.valmont.com
webmail.valmont.com
apacvpn.valmont.com
usomadccppmpub1.valmont.com
valmont.com
VALDC1-W7210.valmont.com
VALDC2-W7210.valmont.com
ocs.valmont.com
guestwifi.valmont.com
webmail.valmont.com
valmont.com
v2o.valmont.com
webmail.valmont.com
valmontux.valmonttest.com
webs4b-na.valmont.com
usomadcvpn.valmont.com
web.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
ocs.valmont.com
web.valmont.com
webmail.valmont.com
valleytest.valmont.com
v2otest.valmont.com
CHM01-W7030.valmont.com
APACVALLEYTEST.VALMONT.COM
webs4b-na.valmont.com
mdevbasestation.valmont.com
*.valmont.com
valmontvpn2.valmont.com
vdm.valmont.com
vdm.valmont.com
v2o.valmont.com
valmont.com
valmont.com
vdm.valmont.com
UTLWEB.VALMONT.COM
fs.valmont.com
webs4b-na.valmont.com
ps.valmont.com
usomadccppmpub1.valmont.com
valleytest.valmont.com
web.valmont.com
cwa.valmont.com
vo.valmont.com
ocs.valmont.com
valucbe01.valmont.com
*.valmont.com
v2o.valmont.com
s4baccess-na.valmont.com
vo.valmont.com
cwa.valmont.com
pstesttmp.valmont.com
mdevbasestation.valmont.com
testcpqapi.valmont.com
CHM02-W7030.valmont.com
fsoma.valmont.com
mobility.valmont.com
v2otest.valmont.com
USOMADCOSAS.na.valmont.com
mysite.valmont.com
profpntmgr.valmont.com
emeavpn.valmont.com
webmail.valmont.com
tsg.valmont.com
fs.valmont.com
valmont.com
v2otest.valmont.com
s4baccess-na.valmont.com
valmontvpn2.valmont.com
apacvalley.valmont.com
emeavpn.valmont.com
pstesttmp.valmont.com
webmail.valmont.com
vdm.valmont.com
CHM02-W7030.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
mysite.valmont.com
v2o.valmont.com
webmail.valmont.com

Certificate

The complete raw certificate details for pstesttmp.valmont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut2VD+ejdGCAC4CmPgeC
eWEojdNz6+se01CYE+sPuqlAISBTdiilXiUFEQ+mKfvwo3l4Ioy4U0aJMoZfkuym
iB7OzWonyCnaiiP0/9KOStj+bTr9bJZVGAbGfnibqluxz++tAZjEqTfgsbrWKDol
1e1DlQ8MKm1/BpeJ+eyXccjAr+ZZavAEo2Z464JIXvD5R5CqfxAJSXi+u6tB5Soj
FowGKuFGF2BLX0HuoSQWQdLAaer1MlTO/dD61q6Z+i2b/BKBzNtDnwSJkcqda4Lb
BSgMTEuVyQssfRRu9sO4gL7DnH3Kh4SrsqV8DzAp/Gbl0UxpO6uXpy+Jwk9xz8n9
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138999129483992464360283563233030012711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Valley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Valmont Industries, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IS Network Admin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pstesttmp.valmont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23589591015376471919385668421117154097254898975472400598809855836225554002793263106347334279080359711490029611415172867207476942257593135269657965161513185803259028604515311455654425627221500815021047221832943557709602548767191120227143736919811192752317928953367178734823475041938035650833415655277253160921577241630631126172898325924802245422766197464904243429416021309760647357639920068564857258646697900544056016337575134877938431639940251256406531569815295649141091100083192664599404554060123543065489879545419181687017920626510299479468982316160367699045916140479650817437445024622176947977880563290158660189643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pstesttmp.valmont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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