rasmsl.cw.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 05:ed:f1:b8:d3:85:f8:03:21:91:16:1a:ab:29:e7:3b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rasmsl.cw.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ed:f1:b8:d3:85:f8:03:21:91:16:1a:ab:29:e7:3b
Serial Number (int): 7881617038557011600650329284051330875
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 78:72:72:65:e9:90:46:05:42:b3:dc:9b:a6:87:30:87:92:5c:57:22
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): b6:0b:cd:22:5f:94:63:d1:15:47:30:76:7b:4b:4b:43:a6:c4:b6:a6
Fingerprint (sha256): 8d:8b:30:01:af:41:42:e9:18:91:e6:30:67:69:a9:4d:0e:0d:c3:54:d5:de:35:47:83:27:93:93:35:45:22:c2

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate rasmsl.cw.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rasmsl.cw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rasmsl.cw.com

Other certificates including the domain name cw.com

(limited to 100 certificates)
cap2.cw.com
wwc.cw.com
icmr.itms.system.cw.com
vitmsbptl6.itms.system.cw.com
www.b2btt-cob.cw.com
customerlink.cw.com
customerlink.cw.com
*.cwextra.cw.com
webtop.cw.com
remote.viridor.co.uk
www.b2btt.cw.com
www.b2btt.cw.com
portal.cw.com
www.b2btt-cob.cw.com
web.cw.com
vitmsaptl6.itms.system.cw.com
wdslportal.cw.com
e12.cw.com
transaction.cw.com
imperva.com
srportal.cw.com
customerlink.cw.com
safe-swi.cw.com
webservices-cob1.cw.com
wipro1.webservices.cw.com
cap2.cw.com
www.support.cw.com
imperva.com
wwc.cw.com
support.cw.com
cw.com
customerlink.cw.com
mail.cw.com
customerlink.cw.com
portal.cw.com
testcustomerlink.cw.com
wwc.cw.com
web.cw.com
gbvls-as056.ad.plc.cwintra.com
*.onlinebackup.cw.com
customerlink.cw.com
www.mystats.cw.com
customerlink.cw.com
srportal.cw.com
icmr.itms.system.cw.com
cap.cw.com
webservices-cob1.cw.com
vitmsasql10.itms.system.cw.com
www.mystats4.cw.com
c3c.cw.com
customerlink.cw.com
safe-sma.cw.com
cap2.cw.com
gbvls-as056.ad.plc.cwintra.com
cap1.cw.com
e-billing.cw.com
cap2.cw.com
www.b2btt-cob2.cw.com
www.b2btt-cob2.cw.com
rasmsl.cw.com
www.c3c.cw.com
cap.cw.com
cap1.cw.com
wwc.cw.com
www.mystats-360.cw.com
rasmsl.cw.com
support.cw.com
transaction.cw.com
support.cw.com
customerlink.cw.com
www.mystats4.cw.com
rasmsl.cw.com
dcwebmail.cw.com
rasmsl.cw.com
e-billing.cw.com
web1.gdoc.cw.com
mycw.cw.com
mail.cw.com
support.cw.com
*.onlinebackup.cw.com
portal.cw.com
www.pensions.cw.com
gbvls-as056.ad.plc.cwintra.com
support.eu.cw.com
vitmsbsql10.itms.system.cw.com
e14.cw.com
gbvls-as057.ad.plc.cwintra.com
cap1.cw.com
sit2-appserver1.labs.cw.com
support.cw.com
sit2-appserver1.labs.cw.com
www.b2bprovide-cob.cw.com
remote.viridor.co.uk
webservices.cw.com
wipro.webservices.cw.com
www.mystats4.cw.com
support.cw.com
gbvls-as058.ad.plc.cwintra.com
www.mystats4.cw.com
host.safe-lab.cw.com

Certificate

The complete raw certificate details for rasmsl.cw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUV5RkcI9Hk9bD56h/yq
YIpQ4IhT5rxPUkh6dfBDQOWbMitvlKPDZUU7msndtiQ+QmEy3bwZBtZwQUUXdTNO
wm4fcDCHhBsnhxC1aTGbTH/kKS7Dh0xrUgZke7F5bskMGNzvfjtGZUFaVJoFhCX5
xaM2rvzlzklKt9JaOsdyJeq1kEGhRXDj/13hjfJfXoYT+CSSdXLXZx2Zt1qpvxgI
m20J8zdB0KGqFpiWCAdzjfLq8vDP7nZ3khNfUB0nOKZ2X6oXzRvl3EHCCcd/bUNN
zaFa2qN376PcsdXdhRs65lLHMyhLup8AeenUIS002dmrbhGKE+d6i/pNKsMMAcnd
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7881617038557011600650329284051330875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rasmsl.cw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24903204850727772034064640248553621697981903203051354159916061620248219231615255508360423085994103335322015419908583900616484832802031668939934560183525523363708254256302193047847891782523831978822731771044382603087956610945517258378199109039205000273095647611822686996883468428180866224367035092745996763518272227037062038932366809550217297600519930967545457328591845040078573491593598420887662999041287176472225369414592992707315291815644603730836493061793173452146875139690467293068314005176941928462690187431563951607591027524903514972304283103952569357762764169140758870349189510327939012684501706984638032502127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78727265e990460542b3dc9ba6873087925c5722
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasmsl.cw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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