HVC001SCLEXE01.companynet.org

- The Hearst Corporation -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:99:89:7d:5c:0a:f2:c5:ae:9a:09:36:ec:62:60:ca was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hearst Corporation

Organization: The Hearst Corporation
Organization unit: Hearst Corporation
State / Province: North Carolina
Locality: Charlotte
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:99:89:7d:5c:0a:f2:c5:ae:9a:09:36:ec:62:60:ca
Serial Number (int): 6114122024617363301709382375773987018
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:92:a1:9c:21:3c:5e:8c:f4:2e:34:a1:9c:2a:87:f3:22:94:b2:28
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): b7:13:b4:35:49:d2:9b:b9:8d:77:23:2a:85:b5:7a:f9:8f:62:ed:60
Fingerprint (sha256): 69:1f:36:fb:69:27:0d:39:3c:8e:5b:a2:9b:3b:a5:be:cc:2e:ff:aa:d0:83:0c:9e:d0:c5:c8:b2:55:e1:7f:b5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate HVC001SCLEXE01.companynet.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for HVC001SCLEXE01.companynet.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

HVC001SCLEXE01.companynet.org
HVC001SCLEXECLUSTER.companynet.org
media.hearst.com
companynet.org
HVC001SCLEXE02.companynet.org
join.hearst.com

Other certificates including the domain name companynet.org

(limited to 100 certificates)
htsexpecluster.hearst.com
*.companynet.org
DAUSEast.CompanyNet.org
HVC001STREXC02.companynet.org
dauseast.companynet.org
htsnjimppub.companynet.org
DAUSWest.CompanyNet.org
HVC001STREXE02.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
hts001glbcmg001.companynet.org
verify.hearst.com
htsnjexpepub.hearst.com
*.companynet.org
dauseast.companynet.org
ise.companynet.org
HVC001SCLEXE02.companynet.org
*.companynet.org
HVC001SCLEXE01.companynet.org
dauswest.companynet.org
htschexpesub.hearst.com
HVC001SCLEXC02.companynet.org
HBM001SCLPUB01-ms.companynet.org
HMD001STRPUB01-ms.companynet.org
het001strise001.companynet.org
HVC001SCLEXC01.companynet.org
htsnjexpepub.hearst.com
*.companynet.org
*.companynet.org
htschexpesub.companynet.org
ise.companynet.org
DAUSEast.CompanyNet.org
HNP001STRPUB01-ms.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
DAUSWest.CompanyNet.org
HVC001STREXC02.companynet.org
ise.companynet.org
dauswest.companynet.org
ise.companynet.org
HVC001SCLEXE01.companynet.org

Certificate

The complete raw certificate details for HVC001SCLEXE01.companynet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6114122024617363301709382375773987018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hearst Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HVC001SCLEXE01.companynet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809831740217613903983168072198715071497328226197513502996822063873134577509335729750749104069410524475318191501523784911579530104762808012033438535971742231470877223677299909179585326623650970553020713254873738406593502926555153705826657483357317586880066732365217343041915307317738637718880843920154767884996688683512454411541738321413415879609502501948897235139669746812162489191086196783048103604065619685983175293097322207224861415260048391235351860830767627256916029505901988447279464006434131038794753083473026356761685207593593870364355110700701351397042245504432143358276030955946844436226332811260829700648131716829204659407404809844655159114466794114776678547157275920635253946099870004026526377140429964827320355811571392365566191491749722330072539730081023547893614307885304640763445059234710375400132912162487837424633001861510091757762701800764291735555852579186928367319130654404441275318431104109517679967991199821916419945339936436171530743387151598529614118932618150614820364228044585556993772003101023989861914484218399280530934899522495096614397040762057927549195285258664409188301553887595287394997968674447221592398247878202541563523553767712634416663462993377618708082476942235408711427811108611650609344961191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f92a19c213c5e8cf42e34a19c2a87f32294b228
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001SCLEXE01.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001SCLEXECLUSTER.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.hearst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001SCLEXE02.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.hearst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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