qa-oz.rightpoint.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:c9:55:f2:d0:d9:ff:e7:07:85:fa:a5:bb:7f:70:77 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa-oz.rightpoint.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:c9:55:f2:d0:d9:ff:e7:07:85:fa:a5:bb:7f:70:77
Serial Number (int): 14337674869082725337217710050963845239
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:88:53:8d:43:fa:46:28:2a:08:41:24:98:cc:fe:43:d4:01:61:6b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 96:99:1b:32:88:bc:c8:41:85:c6:70:df:27:18:ec:b0:c2:08:1f:22
Fingerprint (sha256): 8a:48:de:ab:93:b5:1f:fc:5b:33:56:e2:d4:30:7c:f2:44:e4:08:8e:ea:d2:51:a1:be:dd:3a:c5:e4:4a:ff:21

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate qa-oz.rightpoint.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-oz.rightpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-oz.rightpoint.com

Other certificates including the domain name rightpoint.com

(limited to 100 certificates)
qa-oz.rightpoint.com
scim.rightpoint.com
sni.cloudflaressl.com
employeelink.rightpoint.com
*.rightpoint.com
*.rightpoint.com
sni10e60gl.wpc.edgecastcdn.net
slot-oz.rightpoint.com
talent.rightpoint.com
mail.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
employeelink.rightpoint.com
thanks.rightpoint.com
go.rightpoint.com
go.rightpoint.com
*.rightpoint.com
thanks.rightpoint.com
oz.rightpoint.com
proddevhandbook.rightpoint.com
rightpoint.com
sip.rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
sni.cloudflaressl.com
thanks.rightpoint.com
mail.rightpoint.com
*.rightpoint.com
rightpoint.com
meetings.rightpoint.com
rightpoint.com
*.rightpoint.com
talent.rightpoint.com
sip.rightpoint.com
www.rightpoint.com
*.rightpoint.com
sni.cloudflaressl.com
qa-oz.rightpoint.com
arch.rightpoint.com
brockmann.rightpoint.com
sni.cloudflaressl.com
*.rightpoint.com
mail.rightpoint.com
rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
link.rightpoint.com
www.rightpoint.com
sni.cloudflaressl.com
proddevhandbook.rightpoint.com
meetings.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
rightpoint.com
sl.rightpoint.com
oz.rightpoint.com
brockmann.rightpoint.com
rightpoint.com
*.rightpoint.com
*.rightpoint.com

Certificate

The complete raw certificate details for qa-oz.rightpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NEBL3OsrMTxXGJwh9ox
TYB7fZdR1kPKYnV3ZIdxqB9xh8Q1M3d+wEjLmdlgZbnNTv3tj9UT/iB7+9O0gGvC
OjFlhwonMD2xWEGPhy+BKSkBhBy9O8KDkxQYn0U7vP+jTKHN/TCr9GCWdv1OZsMp
svt+319+pOJ1eQ+VOqBli94FMcH/bFzY3neE/8OIjHAFEV3MKxm0aXl7l4gylJL2
oY+I0MwyKv6AnvBEMSnYtHTC/Zgfg6UuK6oxizaP5w5EOFWMy47CXGsqHneCDivc
onOLVZaBHwz2LOHDKJ1zh039+NlyQoKDe2ZC1VjxR/W1Yh8z45l5vKBj4Gt6/y+r
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14337674869082725337217710050963845239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-oz.rightpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26360631457393777167274547532222777416780845324207541589377463490558043204191715793718451593034358317814090024569395571829706123393229767035972817131600264373036882462851039527079322190308501439572438896694584258709610147005956337242283672753442512243928656442529214527755057844715981372744101444810390924818699903546478431546349816726135226527960379176364569956333459671997835625371999421054438928732430599282565302590664177187200138288230801674417104558829341101461455835148989074790334869572675682154954840326483657924729127599627346578833581834103501986290783655440766108556161143242538116108009232422383614143449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5088538d43fa46282a08412498ccfe43d401616b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-oz.rightpoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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