idsftpstg1.ey.com

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number af:ac:e0:b4:8f:c4:f8:34:00:00:00:00:50:ef:3d:86 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): af:ac:e0:b4:8f:c4:f8:34:00:00:00:00:50:ef:3d:86
Serial Number (int): 233512531887343216623244467592038923654
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b5:29:b1:8c:77:fc:31:67:7a:96:42:40:85:04:b9:6e:58:6a:f7:5b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 05:18:d1:00:d0:0f:f5:6c:e0:dc:a2:18:4e:e4:68:1d:57:d9:3d:7d
Fingerprint (sha256): 00:46:4e:fe:36:8a:74:ed:d0:3b:41:6c:61:e0:6f:30:e7:3f:e9:95:69:1a:99:c0:86:30:09:ef:d8:47:76:a0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate idsftpstg1.ey.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idsftpstg1.ey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idsftpstg1.ey.com

Other certificates including the domain name ey.com

(limited to 100 certificates)
www.payrollportal.ey.com
lan-199-ext.ey.com
eycwa.ey.com
ameyrcf01.ey.com
uat-pmsketchbook.ey.com
gemcms-api.qa-fix.ey.com
tls.automattic.com
qa-coreservices-mobility.ey.com
de63u.ey.com
appleTest0805.ey.com
admin.eytaxbriefing.ey.com
cb.catalyst.ey.com
asegateway-aue.ey.com
apacadvisorybbwy.ey.com
avepoint.ey.net
questionapi-npe.etfv.ey.com
gateway-api-gwc.ey.com
idsftpstg1.ey.com
edna-uat.ey.com
www1.payrollportal.ey.com
eyots.nlg-uat.ey.com
tprp-sandbox.ey.com
de01.eydmz.net
lss-dev.ey.com
eyce-pptools-dev.ey.com
cert00078-azurecdn.akamaized.net
lan-184-ext.ey.com
globalmarkets.xd.ey.com
gtp-stage.ey.com
gateway-api-inc.ey.com
acuityportal.ey.com
athenaproxyapid.ey.com
cert00078-azurecdn.akamaized.net
aai-154-uat.ey.com
ameyrcs01.ey.com
plcarmen-stage.ey.com
cert00078-azurecdn.akamaized.net
tms-109.ey.com
lan-145-ext-we.ey.com
eyvapps-web-uss.ey.com
Analytics.ey.com
cert00042-azurecdn.akamaized.net
aramco-dev.superset.ey.com
survey.demo.change-insights.ey.com
validator.ey.com
slot1.admin.ttt.ey.com
mtt-staging.ey.com
eroom1e.ey.com
eyd-de.ey.com
reckitt.change-insights.ey.com
eyd-de.ey.com
cert00078-azurecdn.akamaized.net
spotfire-hk.ey.com
wotcbics2-stg.ey.com
d2.taxsuite.ey.com
base-api-uks.ey.com
paspricing-dev.ey.com
agility-ipaas-integration-nonprd.ey.com
ca-climate-analytics.ey.com
lan-227-ext.ey.com
dev-canadataxapps.ey.com
eventsink-eunorth-nonprod.ey.com
signinghub-uat.ey.com
ci-dxc-reporting-trac.ey.com
rise-uat.ey.com
webforms.ey.com
VATAnalyticsqa.ey.com
Usn101u.cloudapp.ey.net
www.rpnn.ey.com
askey-uat-web.ey.com
demo.vcsync.ey.com
cincinnatichildrens.eynavigate.ey.com
tasdigitalexperience-uat.ey.com
labpages.braze.com
us.eyos-wapi.ey.com
modelops-uat.eyfabric.ey.com
athenaq.ey.com
TestUpdateOwnerAzureKV20.ey.com
www.highq.com
vedlys.ey.com
AM02.EY.COM
admin.eytaxbriefing.ey.com
cesa22.tpweb.ey.com
neapp01.mdrnp.ey.com
tms3-stg.ey.com
uat.proposal-engine.knowledge-engine.ey.com
alumnihub-qa.ey.com
eyvapps-api-swn.ey.com
payrollcontrol-uat.ey.com
EYRCPAEDCF.EY.COM.ey.com
requestforevidence-portal-aue.ey.com
eyres.nlg.ey.com
Portal.catalyst.ey.com
Conversation-insights-digitalassistant.ey.com
au-ereview.ey.com
qa1-gcs-gsp-pathway.ey.com
uat-paansadminconsole.ey.com
web004.ey.com
cn-director.ey.com
POLTT.ey.com

Certificate

The complete raw certificate details for idsftpstg1.ey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/I8REhdQ5ftPm4/tdGQ
fS0CWltp9MTgF40pyuCf0JGYhhe0ZOlPaSHvs6ClRWZolX6yIy2ZehyA87PSI6Yn
dIoyACKbZQGGxoGXyIzZZI29VwemK31ERIY1IKTFxc+tCkCJoL+spUpHVu+io66a
LJ8gFMJJpzCv/KXsh6oWuqgEF/Lta0T6TPo04kEimCDjjQb5vAJDMoBq6y+BHBhK
4f2LBb0hGMNPj1ySExsUXXxdfXuRlHBbfmlYwEBBtwmGMugt5kXOPz5nHpE3lYkj
59TRhUDTZYaj8qHeCD1cvjRldbhhKsCDBZdRC5Y7k9XxmasfSeINEBw/1FExpyOJ
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233512531887343216623244467592038923654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 20:02:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 20:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idsftpstg1.ey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25745826644178569187182637650500990658926295310527421507645456001907488727272514029792469585220271865643437925649341851069677364302910260260186336983382646540302253035798155393098374246953078303243323118225752443531722012746987139669148341717395391553427510698408702868911477959755360722213013643388467086378553584950802157744721242551289303887946394985059061942488131145980779403489516544242270282787841002883823940445757920274201851605223268162242766411409106130247411651273619775121667830435916426232880213225180928868117446709053821934957726036146572104225802989199267361551098071829212001689760678660321742915861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idsftpstg1.ey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b529b18c77fc31677a9642408504b96e586af75b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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