clustervan-ddtyb.ngpvanapp.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 39:9e:a1:6c:b8:62:65:67:27:3a:dc:40:e2:fb:0b:fd was issued on by SSL Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clustervan-ddtyb.ngpvanapp.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:9e:a1:6c:b8:62:65:67:27:3a:dc:40:e2:fb:0b:fd
Serial Number (int): 76589652745040642379617486084303948797
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 48:7e:71:b0:59:13:1a:af:9e:73:a3:b5:f7:da:b3:9f:4d:6f:25:29
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 4a:9c:22:4e:32:1b:17:4e:89:5b:1f:d5:61:84:f9:3c:66:39:db:d4
Fingerprint (sha256): 90:af:b3:14:e9:33:21:1b:3d:85:a2:73:00:12:c4:82:53:27:a2:6b:93:f8:ce:c8:02:4a:39:12:c0:9f:5c:a0

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate clustervan-ddtyb.ngpvanapp.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clustervan-ddtyb.ngpvanapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clustervan-ddtyb.ngpvanapp.com
raiser.jayinslee.com
kteam.amyklobuchar.com
pfaic.peteforamerica.com
raise.dccc.org
raise.democrats.org
raise.joebiden.com
raise.kamalaharris.org
raise.rayformayor.com
raise.stevebullock.com

Other certificates including the domain name ngpvanapp.com

(limited to 100 certificates)
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
fundraising.democrats.org
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
fundraising.democrats.org
clusteroa-khkpu.ngpvanapp.com
raiser.staceyabrams.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
a0nvidpx.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
raiser.staceyabrams.com
clusteroa-khkpu.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clustervan-ddtyb.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com
clusteroa-mcghe.ngpvanapp.com

Certificate

The complete raw certificate details for clustervan-ddtyb.ngpvanapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ChFo6feKNqYb41xW2+
UpfG3LaDcDM4ugAVvtC98eFvFsApkdI4duCRksh9ZSgEs/KVsn20x5jZ+C4j/Svo
molwLwcjN9k0GqXZTbPrRzJK3FOiCyEwO3cBxz76XM52QWyRR+1YA7b4PEwv6n8e
HpN8rgylZNj3GgX7wZjfgqBqr/W7b8v1RUm1bNwyyS03o+5TdjMoIbad60BoNnZl
Zgfw3SPilAfcxRv0Zo6xwmoCUBoSae8s+XsfWaf0OD/jmLJk1Niy1qT1rhnZzzqH
sD2Cxe1f4hFP0KefQPF/ldcab8fBe6MV9eV3l3ye7R/pX0GthLfxezbIRVCCOxSp
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76589652745040642379617486084303948797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-26 19:40:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-24 19:40:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'clustervan-ddtyb.ngpvanapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26683932007159601134696810806096788964047427021971485867870112795433462070423628537622386009452826490978878116593155641340337559033240552495124232883604862688202462577477900156998075506518245375430784928698864101835743779599846653902427950253188122177218335281964455151317075385999132705926248326434780815777105313516294066429176588892414823409359997262799051029425873998258186030588371027765500530846567868070286623391736810359853665879975031415618084516024820476223099873198682524403771852941062999059110275670260790453659622532401136855296966902736370651973708409238292123904107218159099627997172411520749367765319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clustervan-ddtyb.ngpvanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiser.jayinslee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kteam.amyklobuchar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfaic.peteforamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.dccc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.democrats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.joebiden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.kamalaharris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.rayformayor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raise.stevebullock.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							487e71b059131aaf9e73a3b5f7dab39f4d6f2529
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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