kentico.dataspringinc.com

- DataSpring, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:cd:ae:bd:01:7c:e7:71:84:b5:ea:5c:fc:f4:0a:67 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DataSpring, Inc.

Organization: DataSpring, Inc.
State / Province: South Carolina
Locality: North Charleston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:cd:ae:bd:01:7c:e7:71:84:b5:ea:5c:fc:f4:0a:67
Serial Number (int): 7714104948778454387137348422927125095
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bf:81:2b:b3:f9:3c:0d:6d:b5:88:ba:20:1a:8f:7f:37:4e:99:9f:28
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 54:c2:06:ee:6d:06:17:08:cb:9f:f6:94:8f:58:9e:7f:da:71:b3:a1
Fingerprint (sha256): 68:e6:a3:1f:2c:a6:74:f5:b8:5f:2c:3c:bf:fb:8c:54:65:74:4b:d7:f4:fe:69:30:ed:af:cc:c8:a0:40:c7:82

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate kentico.dataspringinc.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kentico.dataspringinc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kentico.dataspringinc.com
www.iopwsc.com
www.chs-airport.com
www.leaderpumpshop.com
www.srbwomen.org

Other certificates including the domain name dataspringinc.com

(limited to 100 certificates)
dataspringinc.com
support.dataspringinc.com
kentico.dataspringinc.com
dataspringinc.com
hosting.dataspringinc.com
kentico.dataspringinc.com
kentico.dataspringinc.com
kentico.dataspringinc.com
acumatica.dataspringinc.com
kentico.dataspringinc.com
support.dataspringinc.com
dataspringinc.com
kentico.dataspringinc.com
kentico.dataspringinc.com
support.dataspringinc.com
dataspringinc.com
hosting.dataspringinc.com
kentico.dataspringinc.com
kentico.dataspringinc.com
dataspringinc.com
dataspringinc.com
dsi-mail-srvr.ggmitg.com
kentico.dataspringinc.com
dataspringinc.com
DSI-Mail-Srvr.GGMITG.Com
kentico.dataspringinc.com
hosting.dataspringinc.com
kentico.dataspringinc.com
dataspringinc.com
support.dataspringinc.com
dsiacumatica.dataspringinc.com
dsiacumatica.dataspringinc.com
kentico.dataspringinc.com
hosting.dataspringinc.com
kentico.dataspringinc.com

Certificate

The complete raw certificate details for kentico.dataspringinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7714104948778454387137348422927125095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-22 12:00:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Charleston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DataSpring, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kentico.dataspringinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667284172305375918105855878638602480098642401385628059099311129130613750721030325859210043626145417708291938827135688384346099137134846600788097635190088009080659998953287208458085698910849736414096094027837585722908959540234134409830174458309272370258523772458902482714929499693662965008758365623234809103296550910607047082991786786393559072056325163753903428852218373976435761434287447110993896160053857994174233933320689397726824622202209185205374588283498404984238878428668816054189310131619293126141761401894395052509388522748449304822489218795872196355438690895701450351836287578532445537773471366325755438326459463674212345580283703989479051247872767979981929518458505260206362997263735619967584054570209709731964927343852783505302900547595152343273675515686214168384390415328413403800123194722424219375968226056119636034184831435073814771337362241718033104189541188350520069089003725942230171628859082947498835651074823873772097923554175815554320229662636409865455048018818604802309519931169217139636689324348867216132618754225757141029056200195784075410377463198484772178178963350622939073598171147140168497005456963640739889754733261279547182543974529272760600645251479936745339716095213788284153815019752529185287152255691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf812bb3f93c0d6db588ba201a8f7f374e999f28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentico.dataspringinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iopwsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chs-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leaderpumpshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srbwomen.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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