marketing.inrix.com

- Inrix, Inc. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:2e:72:4c:47:33:88:77:67:86:e1:3c:28:d6:20:7c:6c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Inrix, Inc.

Organization: Inrix, Inc.
Organization unit: Operations
State / Province: Washington
Locality: Kirkland
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:2e:72:4c:47:33:88:77:67:86:e1:3c:28:d6:20:7c:6c
Serial Number (int): 1492199916905067419516724302783560271559788
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 88:f7:1a:0d:fb:f5:c2:87:39:06:a6:9e:fd:05:03:4c:45:49:03:99
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): f4:14:05:98:bd:5a:b3:28:3c:00:1a:5c:8d:0b:b2:e9:09:59:4a:a7
Fingerprint (sha256): ae:5e:e3:da:e5:6e:ed:4f:31:01:d1:8f:45:ba:26:b6:8a:97:9e:9b:6b:f5:f4:5d:a9:53:f7:b0:c9:f9:2c:7e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate marketing.inrix.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marketing.inrix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketing.inrix.com

Other certificates including the domain name inrix.com

(limited to 100 certificates)
tts-eu.inrix.com
xfer.inrix.com
partner.inrix.com
*.mobile.inrix.com
www2.inrix.com
www.parkme.com
*.qa.inrix.com
fusion.inrix.com
*.mobile.inrix.com
*.stg.inrix.com
*.qa.inrix.com
partner.inrix.com
*.api.inrix.com
Base.inrix.com
api.iq.inrix.com
*.inrix.com
*.inrix.com
base-beta.inrix.com
*.api.inrix.com
*.beta.inrix.com
tfs.inrix.com
*.beta.inrix.com
www.parkme.com
*.beta.inrix.com
www2.inrix.com
*.stg.inrix.com
marketing.inrix.com
*.beta.inrix.com
*.api.inrix.com
fusion.inrix.com
exchange.inrix.com
*.api.inrix.com
www.parkme.com
*.inrix.com
email.inrix.com
xfer.inrix.com
inrix.com
inrix.com
*.beta.inrix.com
fusion.inrix.com
fordapi.inrix.com
www.parkme.com
*.beta.inrix.com
fusion.inrix.com
*.qa.inrix.com
*.inrix.com
analytics.inrix.com
tpegconnectbeu.inrix.com
fusion.inrix.com
*.beta.inrix.com
*.qa.inrix.com
tpegconnectbna.inrix.com
partner.inrix.com
*.beta.inrix.com
inrix.com
marketing.inrix.com
*.mobile.inrix.com
*.demo.inrix.com
eu-tpeg.inrix.com
*.beta.inrix.com
*.inrix.com
api.iq.inrix.com
www.parkme.com
www.parkme.com
*.qa.inrix.com
tts-eu.inrix.com
*.beta.inrix.com
marketing.inrix.com
fordapi.inrix.com
*.inrix.com
www.parkme.com
www.parkme.com
www.parkme.com
*.inrix.com
email.inrix.com
*.demo.inrix.com
Base.inrix.com
*.inrix.com
*.stg.inrix.com
*.beta.inrix.com
inrix.com
www.parkme.com
bugs.inrix.com
parkme.com
www.inrix.com
www.parkme.com
ha.inrix.com
api.mobile.inrix.com
Base.inrix.com
www.parkme.com
api.mobile.inrix.com
bugs.inrix.com
*.inrix.com
www2.inrix.com
exchange.inrix.com
*.beta.inrix.com
*.beta.inrix.com
*.stg.inrix.com
*.stg.inrix.com
*.inrix.com

Certificate

The complete raw certificate details for marketing.inrix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIqGxJhmwP+vXw0+7mXR
qQZNxF5PT/sLeAnXM4gi/Vs8akgu5wnzOuTJF2oJOOjHUMuo4j0xMOr/ZMLT2VrI
ruh8R4T9+HAVVPWN80vNc5YDiHbydJMpeZxtj6pxyuJwdInph0m8P7UgWnq30rsN
ypM7zTSE7p+N9gmEnL5kg5UrecQEgYeytK0BU7PSJFsWl1A0HSLRcW7fHp6e42mL
+YlmJHys1jJ/KXxCr7SiswNdh+6MqwNeZ1Eh/x61/DQL2ando1sWvdrChyFL27RZ
BGq/Pr9+/Fw50DrAfx+XESoIEHb8AqPisXtybeubrjYi12zt2sJFlm0xcjetKCJM
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492199916905067419516724302783560271559788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-28 16:37:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-13 14:04:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kirkland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inrix, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketing.inrix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25315970925393591034760492803314167318735834473207507057730280761385753720503041997074992213986615840278842036508856766748894105648923048276111363609244944638942264290384385643231715355926669796515284324887060270414597896450543383198450720298055899075184647389664763203266677511236160083431513823202356494789264872934400585378833365046787866221153684177425552969807173518681708918770325905985384558279534504061562331363359765026927576060575344126973038394246811556955275398396355147242175564185913289588488555956575041863083030803548729937806938572286802934915881650736682881085780385283383321242848201748501680507933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.inrix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88f71a0dfbf5c2873906a69efd05034c45490399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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