HVC001STREXC02.companynet.org

- The Hearst Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:55:b2:36:50:4e:ea:63:4e:ef:07:e9:c2:e8:5a:62 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hearst Corporation

Organization: The Hearst Corporation
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:55:b2:36:50:4e:ea:63:4e:ef:07:e9:c2:e8:5a:62
Serial Number (int): 13737239762909048710382830375695571554
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:0f:4c:74:4a:4a:89:bd:6f:c7:a2:a2:e0:0e:b9:38:35:69:8d:c2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 37:ea:c0:e8:2d:bf:53:6e:37:27:ed:88:31:99:e2:dc:cb:63:45:5a
Fingerprint (sha256): ce:e5:a0:71:bb:8c:a9:ea:f6:3a:f8:26:cf:5f:b5:c3:54:69:82:40:9d:42:a4:16:19:3e:ce:db:c4:d9:58:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate HVC001STREXC02.companynet.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for HVC001STREXC02.companynet.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

HVC001STREXC02.companynet.org
HVC001STREXCCLUSTER.companynet.org
HVC001STREXC01.companynet.org
hearst.com
join.hearst.com
companynet.org

Other certificates including the domain name companynet.org

(limited to 100 certificates)
htsexpecluster.hearst.com
*.companynet.org
DAUSEast.CompanyNet.org
HVC001STREXC02.companynet.org
dauseast.companynet.org
htsnjimppub.companynet.org
DAUSWest.CompanyNet.org
HVC001STREXE02.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
hts001glbcmg001.companynet.org
verify.hearst.com
htsnjexpepub.hearst.com
*.companynet.org
dauseast.companynet.org
ise.companynet.org
HVC001SCLEXE02.companynet.org
*.companynet.org
HVC001SCLEXE01.companynet.org
dauswest.companynet.org
htschexpesub.hearst.com
HVC001SCLEXC02.companynet.org
HBM001SCLPUB01-ms.companynet.org
HMD001STRPUB01-ms.companynet.org
het001strise001.companynet.org
HVC001SCLEXC01.companynet.org
htsnjexpepub.hearst.com
*.companynet.org
*.companynet.org
htschexpesub.companynet.org
ise.companynet.org
DAUSEast.CompanyNet.org
HNP001STRPUB01-ms.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
*.companynet.org
DAUSWest.CompanyNet.org
HVC001STREXC02.companynet.org
ise.companynet.org
dauswest.companynet.org
ise.companynet.org
HVC001SCLEXE01.companynet.org

Certificate

The complete raw certificate details for HVC001STREXC02.companynet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13737239762909048710382830375695571554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HVC001STREXC02.companynet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663502107422049435491119366826540220193392336423124828348461172687139574566280895133352904168742663414462058824033270537100125314529595919123204812928872804904660583752017408324571933342749959554189166200571996167336638335795049690689356555017422110344250803369893069684132085365808504621190010312632035529681295901606311594130789156135207100666035433773850420738845737805508168801824947770907745024017271572598228847206376615772881183137133091927486545009404559915187048720517260333752079179481080874788670546180878478155761911740680210487689987988833322908181163059789409001396709888829170312370786204437513961347710797730085619346128794363408220275282212178876100278460141247134208487864988613001251436637849433761339324179830600870021444115757982740441813413836305938559647354219543518213179564457597975123816876429058954775065703397393629117252552350023385853886595734118818056085500213119223526100347340361330058272533142990218501937072822515129956937434185062372846678589496992201831115213734298574866303889238210488543659280760441432576633987587550482841183848275042796369706037603232487324052178074202466704396832445786329847495804345606635671561211556375537527018872083907560496250714505298558850089232412119661161550078007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa0f4c744a4a89bd6fc7a2a2e00eb93835698dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001STREXC02.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001STREXCCLUSTER.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HVC001STREXC01.companynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.hearst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companynet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026f3e490028b910e4b70109db193b87dad8d0a34c36ad1bb92d073e1a734981f90dceeab8bc83457dab08f5e026a76b95ef01c3bf194cbaccdfdd9c2a7ce001ff90f3b7b02b5ad568fc13180bca8fc0b4777b890aa0709132c9683389bb35c386bb086d59c857f318beaaf9ec12d3e01465a7d757e4575e1ada556c67bfbfef502aadfedd365dd6ef6d2fc7fb0880ad902cc72284695a3bf1300e176df64be449acd7490b0f5263e2bf86862ef23deca2b942cf748c061a500d1d1be909933eab20fd7f0be70133a59883e1c074b12c6388e98196e3c64a834c2969d22e0d29034242e3bb2b65625824fd199729510d8331895843e9ba5a56082524c3ba4aff0