*.mediaresources.com

- Media Resources, Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:da:75:70:bb:98:0b:53:d2:87:fa:fb:43:97:d4:42 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Media Resources, Inc

Organization: Media Resources, Inc
State / Province: Ontario
Locality: Oakville
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:da:75:70:bb:98:0b:53:d2:87:fa:fb:43:97:d4:42
Serial Number (int): 19743494629684750540172750345995801666
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:49:24:83:e9:fa:67:42:ab:3f:89:ed:8d:2f:99:5b:02:6c:f0:5c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cc:8d:73:47:ee:c0:0e:8a:40:3b:bd:17:14:07:54:72:2e:1a:b9:a7
Fingerprint (sha256): 83:16:27:3e:18:ad:9e:5c:0d:07:6b:d1:a2:2a:a7:a0:da:10:c2:4a:48:5e:d6:c2:35:ea:28:60:d5:d7:0d:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g1.crl

Check the revocation status for certificate *.mediaresources.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mediaresources.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mediaresources.com
mediaresources.com
vpn.mediaresources.com

Other certificates including the domain name mediaresources.com

(limited to 100 certificates)
help.globalnortherntrading.com
wiki.solutions-tcc.com
staff.stbreladescollege.co.uk
webmail.mediaresources.com
help.globalnortherntrading.com
help.globalnortherntrading.com
*.mediaresources.com
crm.mediaresources.com
*.mediaresources.com
help.globalnortherntrading.com
help.globalnortherntrading.com
wiki.revit.co.nz
help.globalnortherntrading.com
wiki.livingformusicgroup.com
wiki.mediaresources.com
docs.dataroadtech.com
manuales.sinfoapps.com
luxguide.luxuryportal.org
*.mediaresources.com
wiki.advancedblockchain.com
*.mediaresources.com
*.mediaresources.com
crm.mediaresources.com
crm.mediaresources.com
kb.clearlyip.com
kb.dinkor.net
*.mediaresources.com
*.mediaresources.com
wiki.connectingteams.net
webmail.mediaresources.com
crm.mediaresources.com
help.globalnortherntrading.com
help.globalnortherntrading.com
crm.mediaresources.com
crm.mediaresources.com
*.mediaresources.com
help.globalnortherntrading.com
crm.mediaresources.com
help.globalnortherntrading.com
crm.mediaresources.com

Certificate

The complete raw certificate details for *.mediaresources.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19743494629684750540172750345995801666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Media Resources, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mediaresources.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740566780609022164349659337155043066409074652774141822694130414998534730384118978276420976101378439047716770627911751084610973496444520714696504545876547017575601420085281603140688386257410041358677620528886452404324172409257425781977459523550041054679832923241755287350919369951394022150281533498424646794623994540734515884142394887367299699750836718828371073570483233034486027540318920532573045880770115349864326906481802205719148889549872018995023813261307838779600273202531420026261409607309860909874514114565486678685729103315256383671133518751465008929452977969786408157819451533713608538814668332960633709352866093567650444409056293451580209637972955629269266519379002598350724311485082815539058689373437464441900950133549374594049829663276949467487490697661373378468505304070621150835770508732756809772570546030786120941647894064743933719293754039342530008328869488704808610184342338993613043097177696987525894585187774961524119055260168001873388324874979815052154234058903090698981122329474047494520910250052063914104855873452577433776265501340173252560222689747439967480797239731439415146995710312030555973526260056791646661346856528723542602860017168757132891758609617763107327953378029652033043206462303891152525546008373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be492483e9fa6742ab3f89ed8d2f995b026cf05c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.mediaresources.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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