*.rapidcourt.com

- Tessera Data Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:2c:11:8d:15:06:3d:4c:e8:0d:0b:6d:02:fc:cb:99 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessera Data Inc

Organization: Tessera Data Inc
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:2c:11:8d:15:06:3d:4c:e8:0d:0b:6d:02:fc:cb:99
Serial Number (int): 13521096998265595978557192657136569241
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:80:b9:c5:38:87:50:15:f8:43:d1:3d:44:97:9a:09:78:48:81:42
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): d4:74:76:0d:54:02:93:d4:08:5e:e2:54:34:15:7f:06:2d:85:f3:2b
Fingerprint (sha256): b2:fb:c6:24:ac:a4:86:ec:16:78:59:1d:65:9a:68:d1:1c:e3:f9:01:89:7f:e4:c1:88:4a:a0:78:fe:ae:42:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.rapidcourt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rapidcourt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rapidcourt.com
rapidcourt.com

Other certificates including the domain name rapidcourt.com

(limited to 100 certificates)
maintenance.rapidcourt.com
ssl6264.cloudflare.com
ssl6264.cloudflare.com
ssl404791.cloudflaressl.com
ssl404791.cloudflaressl.com
rapidcourt.com
ssl404789.cloudflaressl.com
maintenance.rapidcourt.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404791.cloudflaressl.com
sni.cloudflaressl.com
ssl404791.cloudflaressl.com
*.rapidcourt.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404789.cloudflaressl.com
maintenance.rapidcourt.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
*.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404791.cloudflaressl.com
maintenance.rapidcourt.com
ssl6264.cloudflare.com
maintenance.rapidcourt.com
ssl404789.cloudflaressl.com
maintenance.rapidcourt.com
*.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404791.cloudflaressl.com
ssl404789.cloudflaressl.com
maintenance.rapidcourt.com
ssl404790.cloudflaressl.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404790.cloudflaressl.com
ssl404789.cloudflaressl.com
ssl404791.cloudflaressl.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
*.rapidcourt.com
sni.cloudflaressl.com
*.rapidcourt.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
maintenance.rapidcourt.com
ssl404789.cloudflaressl.com
ssl404790.cloudflaressl.com
rapidcourt.com
ssl404791.cloudflaressl.com
ssl404790.cloudflaressl.com
ssl6264.cloudflare.com
ssl404789.cloudflaressl.com
rapidcourt.com
ssl404790.cloudflaressl.com
ssl404790.cloudflaressl.com
maintenance.rapidcourt.com
ssl404790.cloudflaressl.com
ssl404791.cloudflaressl.com
*.rapidcourt.com
maintenance.rapidcourt.com
ssl404791.cloudflaressl.com
ssl404789.cloudflaressl.com

Certificate

The complete raw certificate details for *.rapidcourt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13521096998265595978557192657136569241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessera Data Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rapidcourt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744883557018883919578656311138462221988853367301488502186136186004212207100099564029714502092981387551478327304627328789986942460861555508492909556127576374586723858027474763465460917931881879417053345348062060207698062883460498845886285263407667495872207618053425210468783910525942706137167722971127209945233121357703501152959858494995081895428796158642539329740659354028223608299267091590471963291269992755603026324840704608767073586300237914404418681263255980657074188653394225874582833210832263323594939115675445006340498553048606973559950664277797911423422391583522951377491537782583104927973056941821643452254127849915956642205329452885572985349070339131483314375196513216110214252931195569014628038648811905482913927913373704215911735902046166144878269199959339598011576992760149828190122974713761906149507330833244120417687878797266856699935843542378358628537500550764283633422162369721510916164249643831063652194439056732845929692267810800973706353398234086915694948772850949945453740442153479303098195801956810652898487901849572607511617520038406449434795900777370106941763607075965788584950230199725186460548062350258846968446634999870163567694763314911150917963343613159770173875240236970389402991649817574645068494977589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e80b9c538875015f843d13d44979a0978488142
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidcourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidcourt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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