app.grooveapp.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 03:a9:bb:54:54:f1:ea:a0:5a:a7:1c:8c:a8:4a:4d:cb was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.grooveapp.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:bb:54:54:f1:ea:a0:5a:a7:1c:8c:a8:4a:4d:cb
Serial Number (int): 4868981648497867487795086923624238539
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 78:38:d8:18:ce:da:fc:58:d5:ab:26:9c:cf:a5:c7:3f:0e:87:22:d0
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): d4:c2:4e:e7:c7:7a:ea:64:5e:8d:77:c7:30:03:39:1a:6f:9d:78:ec
Fingerprint (sha256): 65:b7:fd:fa:14:38:ef:f2:ec:ad:03:31:9e:9a:d7:ac:1b:24:ab:36:2f:1d:f9:18:a3:ea:55:1e:77:d1:43:d1

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate app.grooveapp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.grooveapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.grooveapp.com

Other certificates including the domain name grooveapp.com

(limited to 100 certificates)
engine-staging.groove.co
addin.grooveapp.com
app.grooveapp.com
groove.ehlinks.com
extension.grooveapp.com
scheduler.grooveapp.com
groove.simondata.com
assets-staging.grooveapp.com
staging.meetings.grooveapp.com
meetings.grooveapp.com
extension.grooveapp.com
assets.grooveapp.com
assets.grooveapp.com
meetings.grooveapp.com
developer.grooveapp.com
groove.robinpowered.com
assets.grooveapp.com
notifications.grooveapp.com
app.groove.co
embed.scheduler.grooveapp.com
groove.swivl.com
groove.lyric.com
groove.kiva.org
extension.grooveapp.com
groove.ehlinks.com
extension.grooveapp.com
groove.jebbit.com
groove.jebbit.com
re.grooveapp.com
groove.adpearance.com
stilt.grooveapp.com
groove.cloudleaf.io
extension.grooveapp.com
extension.grooveapp.com
notes.grooveapp.com
meetings.grooveapp.com
groove.grooveapp.com
groove.kiva.org
staging.notes.grooveapp.com
staging.grooveapp.com
groove.trustarc.com
assets.grooveapp.com
addin.grooveapp.com
assets.grooveapp.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
grooveapp.com
app.grooveapp.com
app.grooveapp.com
notifications.grooveapp.com
staging.engine.groove.co
staging.addin.grooveapp.com
branded.grooveapp.com
meetings.grooveapp.com
assets-staging.grooveapp.com
assets.grooveapp.com
groove.crossover.com
notes.grooveapp.com
addin.grooveapp.com
groove.trustarc.com
assets-staging.grooveapp.com
app.grooveapp.com
beta.grooveapp.com
beta.grooveapp.com
app.grooveapp.com
staging.grooveapp.com
staging.grooveapp.com
groove.g2.com
branded.grooveapp.com
embed.scheduler.grooveapp.com
staging.notes.grooveapp.com
beta.grooveapp.com
groove.robinpowered.com
notifications.grooveapp.com
notifications.grooveapp.com
assets.grooveapp.com
beta.grooveapp.com
assets.grooveapp.com
groove.adpearance.com
grooveapp.com
groove.kiva.org
groove.elastic.co
groove.zenreach.com
assets.grooveapp.com
staging.meetings.grooveapp.com
groove.simondata.com
app.groove.co
app.grooveapp.com
notifications.grooveapp.com
notifications.grooveapp.com
scheduler.grooveapp.com
groove.avidratings.com
staging.meetings.grooveapp.com
engine-staging.groove.co
app.groove.co
meetings.grooveapp.com
groove.lyric.com
app.grooveapp.com
app.groove.co

Certificate

The complete raw certificate details for app.grooveapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu/WVuCXlKFOuFNnptva
2UyJ7scVwnQ82bfGOrbtCSiN+Sx+IqteBOoyo3imldu358dTGoIOkF3m1VgKCQjD
5lsCVxfQgQeAujKMrUx0UY8lLNziZhRK5k8xUSIoicBAcKN731c0vAjEtQOy+cP7
UqJONEkBQU+iMnYINcbCEvPlpacXMVn7rYiCbzK5zU2WMRmY6ay3ZBqho42cVUcD
4F6dgmzePjWvsOawji7L2ex226lNwqB0v4alW4t4ytLfHgkFZMoLP+zUOx2GYe8P
f/FCi876PBMwfcA72A6WINzMCEtuowSEBBgComwgSQt9ZiEBBQNRi5MQ9Pew0W2v
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4868981648497867487795086923624238539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.grooveapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26123358985378464593637192754774248106915199435942000036229091802175950676291186871031696470030801244703221617046539734966841771799444172989254421477267840971831736309092773123717642090182373456494416528306606962695274498661764024982067914845217821654758567441084610740038426072527409869107539948947908738075986354243690123587428487990733847872941170797515538478098760314197868351678262329266451370650919220436502655163807416976886908810949707891897618798488365226739639442152127106998319474016042856125907970979142014002191970385547013630952406004879811377904245079793978141138797182767482844176652381090988233175019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7838d818cedafc58d5ab269ccfa5c73f0e8722d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grooveapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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