azure-autocrmportaltest.visionrt.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:56:f8:17:5d:9f:38:7f:a8:96:f9:e4:12:f1:b9:a4 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=azure-autocrmportaltest.visionrt.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:56:f8:17:5d:9f:38:7f:a8:96:f9:e4:12:f1:b9:a4
Serial Number (int): 12414621380702273400644317090937944484
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:1e:41:b8:1e:d2:e7:53:a0:ac:90:42:2b:a3:6d:7a:c8:f7:8d:d7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 3b:e3:35:0f:80:9a:31:83:3f:55:ca:a7:d0:bd:09:81:b5:71:58:92
Fingerprint (sha256): bf:ca:22:2b:ab:56:4c:42:ea:50:a6:6c:c4:72:fe:c3:de:b9:a3:f4:fb:27:56:fb:18:ef:5b:a6:b0:e5:48:d6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate azure-autocrmportaltest.visionrt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azure-autocrmportaltest.visionrt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

azure-autocrmportaltest.visionrt.com

Other certificates including the domain name visionrt.com

(limited to 100 certificates)
azure-crmsupportliveprevious.visionrt.com
ithelp.visionrt.com
crmapipr.visionrt.com
azure-crmtest.visionrt.com
ithelp.visionrt.com
visionrt.com
azure-crmsupportpr.visionrt.com
azure-autocrmsupporttest.visionrt.com
azure-crmduolive.visionrt.com
sni11c16gl.wpc.edgecastcdn.net
exchange.visionrt.com
sni11c18gl.wpc.edgecastcdn.net
visionrt.com
visionrt.com
*.visionrt.com
sni1a5cegl.wpc.edgecastcdn.net
azure-crmsupporttest.visionrt.com
azure-crmportaltest.visionrt.com
azure-autocrmduotest.visionrt.com
visionrt.com
*.visionrt.com
*.visionrt.com
visionrt.com
azure-crmliveprevious.visionrt.com
azure-crmduotest.visionrt.com
sni1a5d0gl.wpc.edgecastcdn.net
sni11c14gl.wpc.edgecastcdn.net
azure-crmcustomerportaltest.visionrt.com
visionrt.com
apps.visionrt.com
azure-autocrmportaltest.visionrt.com
azure-crmapitestprevious.visionrt.com
*.visionrt.com

Certificate

The complete raw certificate details for azure-autocrmportaltest.visionrt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WUfGhSlgSMzdl5rLzqj
XagTrg8X2tZ2YoWvZl/VfyTV2+Pmb9vnfpfbNCqqBWqsOM/kTdADMku2DwRRQ+Pf
kXnzNdTv75MGkuAF/lnOAfn+XtD6aFfIDgV++KoKa1GV073+cfWdhYls6t84CUkH
kfpvRizZyEXedXw6AnF9zAGbd87/FffQG9hlmmSD6DgIsC+fGvhg0hTEYaR9rgiq
9bFOHuM6J2aYB0209O+oVJtUqUEDtGRHIUaWH3nUdEAs4TkEqpMbczKfnpPREqk3
VV+Us4AL6tPB26lkq5QDC48ZH7OTLDsJiN1SbyDF7992sgMD5U9dz7WT/lCa2OQ4
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12414621380702273400644317090937944484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azure-autocrmportaltest.visionrt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29968343143006680844536643662056012290786978295330224362383563358636283649222510086898554480857644279026038788714547341503872641527372966833435363314498445943959268678659644710678410270819464394584486179247238855686136118113163757002491530469052392980551005809243372991043939316356963661116631363477505882925148213270955231532954957937029965372334734886508785094984099564581239084236469907959653587866513375101776890709820785675433489971447082895731193730527676948270552340898314740661162176572173753335093168972333775618904628394567847317434966690898560254490782053956145424096889083877823364035701584905697526823141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd1e41b81ed2e753a0ac90422ba36d7ac8f78dd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-autocrmportaltest.visionrt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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