sso.thehackettgroup.com

- The Hackett Group, Inc. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 2c:6b:b2:6a:80:e4:47:94:a8:88:6b:e1:fa:1e:79:51 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Hackett Group, Inc.

Organization: The Hackett Group, Inc.
Organization unit: IT
State / Province: Florida
Locality: Miami
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:6b:b2:6a:80:e4:47:94:a8:88:6b:e1:fa:1e:79:51
Serial Number (int): 59045226285384255847662307201890810193
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 48:1c:07:22:5c:b2:65:c6:87:64:c8:d5:0d:1a:e6:28:b2:3e:72:06
Fingerprint (sha256): 67:61:d3:a5:13:12:b4:fa:8a:96:99:78:23:56:9a:f3:20:40:65:1a:50:75:69:56:ea:52:d5:68:d1:2e:5c:11

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate sso.thehackettgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.thehackettgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.thehackettgroup.com

Other certificates including the domain name thehackettgroup.com

(limited to 100 certificates)
helpdesk.ejplastics.com
ssc-sd.oshco.com
servicedesk.primeenergy.ph
ithelp.newhopechurch.tv
hybrid.thehackettgroup.com
servicedesk.towermsa.com
www.thehackettgroup.com
hd.gsp.bl.it
helpdesk.americanassets.com
sso.thehackettgroup.com
helpdesk.maruservices.com
thehackettgroup.com
hd.gsp.bl.it
dms.thehackettgroup.com
desk.kavasa.in
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
vpn-iad.ams.thehackettgroup.com
www.thehackettgroup.com
events.thehackettgroup.com
helpdesk.charlesignatius.co.in
member.thehackettgroup.com
member.thehackettgroup.com
hd.gsp.bl.it
www.thehackettgroup.com
ssc-sd.oshco.com
ssc-sd.oshco.com
servicedesk.gourmetegypt.com
thehackettgroup.com
hd.gsp.bl.it
hd.thehackettgroup.com
hybrid.thehackettgroup.com
servicedesk.towermsa.com
hd.gsp.bl.it
servicedesk.ibsagroup.com
vpn-ord.dms.thehackettgroup.com
email.thehackettgroup.com
helpdesk.maruservices.com
hd.gsp.bl.it
smtpr03.thehackettgroup.com
betahpn.thehackettgroup.com
mindshare.thehackettgroup.com
*.thehackettgroup.com
*.thehackettgroup.com
*.ams.thehackettgroup.com
helpdesk.charlesignatius.co.in
mindshare.thehackettgroup.com
hd.gsp.bl.it
mindshare.thehackettgroup.com
vpn.thehackettgroup.com
gbs.thehackettgroup.com
sso.thehackettgroup.com
sso.thehackettgroup.com
helpdesk.americanassets.com
wiki.thehackettgroup.com
helpdesk.riversidecc.org
mesadeayuda.pffsa.com
ssc-sd.oshco.com
support.cortacgroup.com
hd.gsp.bl.it
thehackettgroup.com
atendimento.escrimig.com.br
oem.dms.thehackettgroup.com
atendimento.escrimig.com.br
atendimento.escrimig.com.br
esupport.infimedia.co.id
helpdesk.ejplastics.com
sos.olanet.mx
sos.olanet.mx
atendimento.escrimig.com.br
dms.thehackettgroup.com
desk.kavasa.in
servicedesk.zip.co
member.thehackettgroup.com
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
esupport.infimedia.co.id
hd.thehackettgroup.com
servicedesk.ibsagroup.com
helpdesk.ejplastics.com
transfer.thehackettgroup.com
hd.gsp.bl.it
helpdesk.americanassets.com
gbs.thehackettgroup.com
www.thehackettgroup.com
www.thehackettgroup.com
hd.gsp.bl.it
member.thehackettgroup.com
mesadeayuda.pffsa.com
ssc-sd.oshco.com
vpn.thehackettgroup.com
servicedesk.zip.co
vpn.thehackettgroup.com
servicedesk.etlsystems.com
hd.gsp.bl.it
sso.thehackettgroup.com
www.thehackettgroup.com

Certificate

The complete raw certificate details for sso.thehackettgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QX9xTLQEMn4D68QLC8
jfm5vuNs2TMiY5xfJ+N86xccl4iMgHHMrJprZ2vV/kNvzHj6kxKZ0uof/oWYBOE4
b2ySG/9VL51D727/CVllvVtl8Q8bur2bTh6HmuBCwf9MnqWrrjUL9ozuQm9TUT+a
XPejS1eQfoHSuYzoKHFenI0kxiPNodfU2THMGgC1DfGb9CP1zynR9JJOT8T1mi1h
0al+khjxPcW6C/qZplLYi4ZovyuTmCSiKefvY1frJDQbLoBPgTuNkJzRyRaHIKDw
lCYBsZLyXyK4AIPhIM6CcTPJCr7xq4jH5l1xD8oSQEBwCzGNCq78Z7xDXRUlxt7P
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59045226285384255847662307201890810193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Miami'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Hackett Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sso.thehackettgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20697210756628014954403804428913421651977467552695246090420878066339679517970627883584113331267044387338703153791716154192051335108070744966536826055851633796326366679507358963958611591452809124376847861815746193035228399164427074268551244093391594937724198382950724429288852979001770726554972086418558435544934663698179668569589837805843916248454454549136294648554333503136659151401985742813119045945112677095586039418177995896054442041908015967849280033772416042609825606145352087140150559772263021701509956060399862593719825750275896651508903495480412263931288413775987990694713028086776653249525352672913853960081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thehackettgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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