azure-crmduotest.visionrt.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:0d:14:ab:1a:71:e1:d4:20:83:d2:e7:2c:c2:72:2b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=azure-crmduotest.visionrt.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0d:14:ab:1a:71:e1:d4:20:83:d2:e7:2c:c2:72:2b
Serial Number (int): 16018655012972091525109550918362362411
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:a8:77:29:74:47:01:4c:21:08:f0:57:3c:82:c6:13:a1:b8:81:e8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 21:9d:02:df:e5:15:cd:19:4a:38:4e:eb:f2:c8:f6:33:36:ab:b8:47
Fingerprint (sha256): a1:a6:29:1c:6c:b7:2f:48:c1:77:fe:a5:3a:07:d0:99:72:ca:71:b1:83:11:30:47:7b:f9:58:5c:82:a7:e8:32

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate azure-crmduotest.visionrt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azure-crmduotest.visionrt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

azure-crmduotest.visionrt.com

Other certificates including the domain name visionrt.com

(limited to 100 certificates)
azure-crmsupportliveprevious.visionrt.com
ithelp.visionrt.com
crmapipr.visionrt.com
azure-crmtest.visionrt.com
ithelp.visionrt.com
visionrt.com
azure-crmsupportpr.visionrt.com
azure-autocrmsupporttest.visionrt.com
azure-crmduolive.visionrt.com
sni11c16gl.wpc.edgecastcdn.net
exchange.visionrt.com
sni11c18gl.wpc.edgecastcdn.net
visionrt.com
visionrt.com
*.visionrt.com
sni1a5cegl.wpc.edgecastcdn.net
azure-crmsupporttest.visionrt.com
azure-crmportaltest.visionrt.com
azure-autocrmduotest.visionrt.com
visionrt.com
*.visionrt.com
*.visionrt.com
visionrt.com
azure-crmliveprevious.visionrt.com
azure-crmduotest.visionrt.com
sni1a5d0gl.wpc.edgecastcdn.net
sni11c14gl.wpc.edgecastcdn.net
azure-crmcustomerportaltest.visionrt.com
visionrt.com
apps.visionrt.com
azure-autocrmportaltest.visionrt.com
azure-crmapitestprevious.visionrt.com
*.visionrt.com

Certificate

The complete raw certificate details for azure-crmduotest.visionrt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubKDxmONL2H+LrnL1AF0
YmH4ec0l9QylyE4elb4Gb/Pc5KMOuZRVXcQe+fLP++dFkOiAOXTRGIGp3nqXdrq+
LxpbwOmxEo8PVw+FHljxm4zu/+LDtlWJyHn6MNG4Nyj4POYiiGKVwCmsGJW2IJPM
dVaJpjbMnXsIV8ZKGyycmyUA7TvFPTHJ2Lv59MNkidIKQzfyVZsbX5izC8dqlFVX
ao96uwvh+w2+z4r6vpNw1Sqx7hwjAJ3F5UY3nkbQjaHsx7jWbXyYTCpzoifgTU1Q
x8h3PWU+PH/a92v8mQtMwAowo9ZxPy4kELn2eKAZNfPcokbBSjiGK/hA2NM7Sput
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16018655012972091525109550918362362411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azure-crmduotest.visionrt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23442115320818064430919268484996041780333690074990747142444316059687006471329534885767342564990861469856016730658889972219441986289913606921196103723607121196852495644771369702826043450528481859243349392356094063994495348451232457308387234737279312807601721833126278833670871824415907045510025341228880058708631126911818479330192736330996090060682241629396978079059333493889041260169288447090634644802115979019805298774959058075662827665778852559869791737407668145871562794312703714684091561460287405633075149806236117196734210861610796206215027407589081154670691168958369913718614064787941108612914369360744956014017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33a877297447014c2108f0573c82c613a1b881e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-crmduotest.visionrt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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