acsboot.vzwdm.com

- Verizon Data Services LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:a8:46:94:e0:1e:0e:bd:de:0b:d5:09:09:56:5a:72 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:a8:46:94:e0:1e:0e:bd:de:0b:d5:09:09:56:5a:72
Serial Number (int): 10178333406529549470106653669048343154
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:68:5f:e6:ed:4a:1d:88:7a:bd:5c:e9:36:55:78:d2:92:79:3d:3d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): cb:d0:a6:50:dd:3d:5c:ed:82:e1:6a:31:d2:87:07:3e:b3:c6:ef:ef
Fingerprint (sha256): ae:2d:0c:bb:40:2f:c8:60:40:94:42:c9:74:c4:64:f6:08:df:34:ad:d4:d6:06:c9:ab:eb:7e:4d:f9:fe:6d:5b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate acsboot.vzwdm.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acsboot.vzwdm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsboot.vzwdm.com
vzwdm.com
verizon.com

Other certificates including the domain name vzwdm.com

(limited to 100 certificates)
iotcdn2.vzwdm.com
cdn.vzwdm.com
hdm.vzwdm.com
acsboot.vzwdm.com
hdmw.vzwdm.com
4g.vzwdm.com
lwcdn.vzwdm.com
vzwdm.com
cdn2.vzwdm.com
4g.vzwdm.com
4g2.vzwdm.com
cdn2.vzwdm.com
lwiotcdn.vzwdm.com
iotcdn1.vzwdm.com
hdm5g.vzwdm.com
lwiotcdn.vzwdm.com
cdn2.vzwdm.com
iotcdn2.vzwdm.com
cdn.vzwdm.com
acsboot.vzwdm.com
hdmw.vzwdm.com
iotcdn2.vzwdm.com
4g.vzwdm.com
vzwdm.com
iotcdn3.vzwdm.com
lwiotcdn.vzwdm.com
cdn.vzwdm.com
lwcdn.vzwdm.com
cdn.vzwdm.com
3g.vzwdm.com
m2m.vzwdm.com
4g.vzwdm.com
hdm.vzwdm.com
iotcdn.vzwdm.com
iotcdn.vzwdm.com
hdm5g.vzwdm.com
m2m.vzwdm.com
lwcdn.vzwdm.com
hdm5g.vzwdm.com
iotcdn2.vzwdm.com
3g.vzwdm.com
m2m.vzwdm.com
4g2.vzwdm.com
hdm5g.vzwdm.com
hdmw.vzwdm.com
cdn.vzwdm.com
3g.vzwdm.com
cdn.vzwdm.com
4g.vzwdm.com
lwcdn.vzwdm.com
hdm.vzwdm.com
4g.vzwdm.com
vzwdm.com
4g2.vzwdm.com
lwcdn.vzwdm.com
iotcdn2.vzwdm.com
hdmw.vzwdm.com
hdmboot.vzwdm.com
cdn.vzwdm.com
3g.vzwdm.com
hdmw.vzwdm.com
3g.vzwdm.com
lwcdn.vzwdm.com
lwcdn.vzwdm.com
4g.vzwdm.com
4g.vzwdm.com
4g2.vzwdm.com
iotcdn2.vzwdm.com
cdn2.vzwdm.com
3g.vzwdm.com
cdn.vzwdm.com
lwcdn.vzwdm.com
iotcdn2.vzwdm.com
vzwdm.com
lwiotcdnroot.vzwdm.com
4g.vzwdm.com
4g2.vzwdm.com
hdmw.vzwdm.com
lwcdn.vzwdm.com
cdn2.vzwdm.com
iotcdn.vzwdm.com
m2m.vzwdm.com
cdn.vzwdm.com
hdm.vzwdm.com
4g.vzwdm.com
hdm.vzwdm.com
cdn1.vzwdm.com
lwiotcdn.vzwdm.com
lwcdn.vzwdm.com
vzwdm.com
lwiotcdn.vzwdm.com
acsboot.vzwdm.com
4g2.vzwdm.com
cdn2.vzwdm.com
lwiotcdn.vzwdm.com
iotcdn1.vzwdm.com
hdmboot.vzwdm.com
hdm.vzwdm.com
hdm.vzwdm.com
hdm.vzwdm.com

Certificate

The complete raw certificate details for acsboot.vzwdm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0luaXi6ydFHW/3Q7za0
ke/nm2e08QpN0lfHQQwR5Wb/G1ISEAEDhKsLLNaoPamp3tcFDc51zWBnNzXmq2Je
tgtPR7n0FDoPqiH+Vrya6XevYlaL9ak323o6ig13VuVOhsuwa/l4vFfUHN5ZCUp9
p+FZAOW9uiBScjCpusN8zXJJ4dqnbEfte4sgeD96L7IqA897Rq8wQs0g5XIWNrz9
AY4etmaPFptp+1er0AcJjgshT9y5hoMWGJf/jn7bUV7f3kpgA8V1FjoLGi+wwGU5
rXHvkhN+9xWyCuHw0p/v4BqP89kGiO+QOXSk7K+xiyURzRAK1TCSQQEvWs4Oxu2T
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10178333406529549470106653669048343154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acsboot.vzwdm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24147726570580436134428427783511785869065967609886068365543493405299290584492661251176697135749955555642075604792941650079489093627532582030693560785886982486580447362938049656631941224887956954417298435621329024932775072120892667314240477860721691429104141148130154596586437105169569216422839950110895457829894295355480148218459940978023484452944594751052274592453586037074744007341946393997852586432827974619093358236708001337595370655565968667853063671959153666099396697545138098424384169192472359876363234777316670357583048390984959031106319513090353487377470149343945723053983083156718275899020614391864497116061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5685fe6ed4a1d887abd5ce9365578d292793d3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsboot.vzwdm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzwdm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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