dominion-dev.myrebateportal.com
Issued by SSL.com RSA SSL subCA
About this certificate
This digital certificate with serial number 41:e1:b1:43:f3:5d:50:03:9d:90:69:17:0f:3e:54:48 was issued on by SSL Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dominion-dev.myrebateportal.com
SSL Corporation
Organization:
SSL Corporation
State / Province:
Texas
Locality: Houston
Country: US
Locality: Houston
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 41:e1:b1:43:f3:5d:50:03:9d:90:69:17:0f:3e:54:48Serial Number (int): 87571681889294268100366042237696365640
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca
Fingerprint (sha1): 9a:68:97:1f:c7:fa:2f:7f:69:80:4b:51:01:7a:43:a3:c6:87:3c:d9
Fingerprint (sha256): 5e:eb:ce:51:f7:bd:bb:a9:3e:50:86:92:5a:0c:c9:26:cf:ba:07:3d:8c:2e:39:01:2f:04:28:2a:f2:83:8b:29
Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer
Revocation information
OCSP Server: http://ocsps.ssl.comCRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl
Check the revocation status for certificate dominion-dev.myrebateportal.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dominion-dev.myrebateportal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dominion-dev.myrebateportal.com
www.dominion-dev.myrebateportal.com
www.dominion-dev.myrebateportal.com
Other certificates including the domain name myrebateportal.com
(limited to 100 certificates)
dominion.myrebateportal.com
nvenergy.myrebateportal.com
*.myrebateportal.com
dominion.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
ppl.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
dominion.myrebateportal.com
nvenergy.myrebateportal.com
*.myrebateportal.com
dominion.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
dominion-dev.myrebateportal.com
*.myrebateportal.com
ppl.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
*.myrebateportal.com
dominion.myrebateportal.com
Certificate
The complete raw certificate details for dominion-dev.myrebateportal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxzCCA6+gAwIBAgIQQeGxQ/NdUAOdkGkXDz5USDANBgkqhkiG9w0BAQsFADBp MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg U1NMIHN1YkNBMB4XDTI0MDIwOTAwMTYwN1oXDTI1MDIwODAwMTYwN1owKjEoMCYG A1UEAwwfZG9taW5pb24tZGV2Lm15cmViYXRlcG9ydGFsLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAM5yKRRwVo3Uk1SUVNtuI0FyV9+8/BkgMJWa 1OJ/GakMGAbFHuEIq/yz0ZXMH03Lqf9+thu85RirH9hZAD7HUIKrmiNDaDnydMmc nqd9pCYnL5DjTlqZNBf0YrdN4d7wTzhr34AZS0uH81X3CmhWWB1kbPpYcgRkp0cp 9iU75l+O4+LwabxKWkN1j3lgIK7/9gTR4lJ9Hd2QknOdGgSmZelaW3x8CRMwegIK 02wEUtzYgpj31EfsdaCh6dBcZ4KC7Cy5Z35QPE0jh6lLOyCaJBTFdk79kN4RulXO a4t3mpMp3G68AkNs3RkCE7YNWgc2ohhXMCVuJZgwg6RWDp0dMSUCAwEAAaOCAagw ggGkMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32Hxwuzn MsowcgYIKwYBBQUHAQEEZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wu Y29tL1NTTGNvbS1TdWJDQS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzAB hhRodHRwOi8vb2NzcHMuc3NsLmNvbTBPBgNVHREESDBGgh9kb21pbmlvbi1kZXYu bXlyZWJhdGVwb3J0YWwuY29tgiN3d3cuZG9taW5pb24tZGV2Lm15cmViYXRlcG9y dGFsLmNvbTAjBgNVHSAEHDAaMAgGBmeBDAECATAOBgwrBgEEAYKpMAEDAQEwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMEUGA1UdHwQ+MDwwOqA4oDaGNGh0 dHA6Ly9jcmxzLnNzbC5jb20vU1NMY29tLVN1YkNBLVNTTC1SU0EtNDA5Ni1SMS5j cmwwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4ICAQAq0E6bVfZDFD9CH2rK86CHiH9REa6TiJmbUq6xn5ZqEID485Eu CuB5IQc2D9+rd1JwwoVPdseGrRzx6FXlP/ukIH1x1pnzjqvOa06XDFv4IMeEzHh6 pjNBypq45Kr1JTNARH37rw8G0aAECwx+PB0tOz1zni9pfhYujrnd35lWH13b1xhH WQHNsm0fSwVg4S2c28ZHKxvBMgNa3cj3WTdvo+kc+vbO7+W5AU237q/91u4bLjxn Z5dor9omBquBEekjv/iz13qLOVEM115B9rVyII+oHouGWQKfSrQ/IH4RSqmb1ex1 WyR1V4FV/249yZo7O8Lu0KCGhqMQYcdhNcRj+WqGz/8RG9mSOma7gMkhCdiuW1Mt 7g6O4dHcCCjDfx8brVBWuVjlnL+KYSmvGYoKau9vPrB5y0YGX0fnEFoQcf1/Vr/d ni/Fgcn2KOLOtrq5UqhpNaWw7ItFexvg3HmyDbL5Ze738fgBu6kGPWZAvPhCftIq vy7HzznXEp3cjsZRjXWh23EEoRl9ccZZP/ft1hwRfXDKodNSNqMrUqkPmoD5oT5Q vd0Q7xcuhr5SXX473VGpAVhkygYJX9nqeitaQ30UUeJ46lygUzkyrYMGbmK5mFgn L/gsZ0JfRGaWEalBpkp2guhnpE2qy8Iis4PzcRU29d3ggiW/QeoAd7vjxQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznIpFHBWjdSTVJRU224j QXJX37z8GSAwlZrU4n8ZqQwYBsUe4Qir/LPRlcwfTcup/362G7zlGKsf2FkAPsdQ gquaI0NoOfJ0yZyep32kJicvkONOWpk0F/Rit03h3vBPOGvfgBlLS4fzVfcKaFZY HWRs+lhyBGSnRyn2JTvmX47j4vBpvEpaQ3WPeWAgrv/2BNHiUn0d3ZCSc50aBKZl 6VpbfHwJEzB6AgrTbARS3NiCmPfUR+x1oKHp0FxngoLsLLlnflA8TSOHqUs7IJok FMV2Tv2Q3hG6Vc5ri3eakyncbrwCQ2zdGQITtg1aBzaiGFcwJW4lmDCDpFYOnR0x JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87571681889294268100366042237696365640 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:16:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 00:16:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dominion-dev.myrebateportal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26061385447968268991302777596048371857056534542961287499352329647622854834968138224503028268357321562300787049134521524462024193406489324475035037414921407944931803799649521899577576060470196298796643558113289578471515586802759396206947253692446561468165794415576825812014122044935945957405142786316803341115041224216704147817307417908783954388248728891082319433285367776013905606616451047247332694746817379233677887996379192036982747284238254377740432304233747488207955246139151289814822879577226693139941304105039116685610070732848106822204882493871674579460020575448646894852476042436556042573452131707587957436709 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominion-dev.myrebateportal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominion-dev.myrebateportal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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