proddevhandbook.rightpoint.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:58:86:c6:3f:1e:e5:23:d9:bd:5a:36:16:f3:bc:b2 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=proddevhandbook.rightpoint.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:58:86:c6:3f:1e:e5:23:d9:bd:5a:36:16:f3:bc:b2
Serial Number (int): 15081163626783112058011807592108768434
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:58:a8:29:c4:11:fc:de:a0:62:f5:98:c5:f2:74:75:31:b5:7b:b3
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): fc:6a:7d:32:bd:47:ef:68:37:b5:fb:41:7b:9a:3b:b2:0e:dc:86:42
Fingerprint (sha256): c4:47:0d:ed:8a:f9:87:88:c4:32:e5:6b:e5:27:e0:7c:44:b2:db:2c:a9:d0:e7:b1:7a:23:70:fb:3f:fc:15:ec

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate proddevhandbook.rightpoint.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proddevhandbook.rightpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proddevhandbook.rightpoint.com

Other certificates including the domain name rightpoint.com

(limited to 100 certificates)
qa-oz.rightpoint.com
scim.rightpoint.com
sni.cloudflaressl.com
employeelink.rightpoint.com
*.rightpoint.com
*.rightpoint.com
sni10e60gl.wpc.edgecastcdn.net
slot-oz.rightpoint.com
talent.rightpoint.com
mail.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
employeelink.rightpoint.com
thanks.rightpoint.com
go.rightpoint.com
go.rightpoint.com
*.rightpoint.com
thanks.rightpoint.com
oz.rightpoint.com
proddevhandbook.rightpoint.com
rightpoint.com
sip.rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
sni.cloudflaressl.com
thanks.rightpoint.com
mail.rightpoint.com
*.rightpoint.com
rightpoint.com
meetings.rightpoint.com
rightpoint.com
*.rightpoint.com
talent.rightpoint.com
sip.rightpoint.com
www.rightpoint.com
*.rightpoint.com
sni.cloudflaressl.com
qa-oz.rightpoint.com
arch.rightpoint.com
brockmann.rightpoint.com
sni.cloudflaressl.com
*.rightpoint.com
mail.rightpoint.com
rightpoint.com
snid6c3gl.wpc.edgecastcdn.net
link.rightpoint.com
www.rightpoint.com
sni.cloudflaressl.com
proddevhandbook.rightpoint.com
meetings.rightpoint.com
sni.cloudflaressl.com
sni.cloudflaressl.com
rightpoint.com
sl.rightpoint.com
oz.rightpoint.com
brockmann.rightpoint.com
rightpoint.com
*.rightpoint.com
*.rightpoint.com

Certificate

The complete raw certificate details for proddevhandbook.rightpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6PWyyNqhm9d5J4Wbuxk
ed4otRNKS1iUaARvhbcBGXqIOdYl6eemvxHVHD6DGft5biwzCTcMAdh7mQh/IIwW
B9jgOQxLm+9DQ0rRi8iijv367LhylAIbb/hwrg8AoRLjpmmAe1gIxO0yoR9LpC26
hRsbj7jSUzL+vHhOvxIv8mQImwLM98rRVcZzln9ibGUHT7XXl9YACj8BjNIUJcpF
rZ4xIQXttwTmiBFwZPTdTlfl7e+KNvq15nqLEfBf5LHsf5twxSn2V7N5cS6UTd7f
4gtaD0aoqyRxh2u0TMkPHbolUWli5b64SruXgtiClyytlPwwionYifvGootlKuIa
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15081163626783112058011807592108768434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proddevhandbook.rightpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19647729310115938666261422520998191860374230372213548590904220915704203195234484074118020540700654560187905489521513857024415123813809032042664156458612894185443711607885041795893851854571112127184666928053845771159550609724570580224929379366727368625575091192489913980893019096621935359891280814166013586828538150745591118452243377217427264985409868070801296072592402236519611578310588902700970809542336375319100665492583183224498665499724666905628578903451901597546510551274889547981741588978827512620835850673012909466880360046116600837415355708179217088842494547595318292414566053021568103784980534025405151189617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be58a829c411fcdea062f598c5f2747531b57bb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proddevhandbook.rightpoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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