designsystem.bakerhughes.com

Issued by R3

About this certificate

This digital certificate with serial number 04:54:9e:07:90:ea:92:47:88:7b:04:09:75:48:e5:cc:8f:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=designsystem.bakerhughes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:9e:07:90:ea:92:47:88:7b:04:09:75:48:e5:cc:8f:6c
Serial Number (int): 377242919857063488212987853411341388517228
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:28:b9:81:43:2d:ba:b0:4f:7f:ca:4d:0c:1b:af:8c:2b:0e:92:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:0a:f5:33:de:b9:e3:f1:32:79:17:b1:8e:0f:18:e1:82:ca:de:b8
Fingerprint (sha256): 00:7f:f2:ba:60:1f:1d:a5:b2:ff:8d:19:91:f8:98:4c:ad:8c:0a:42:e0:6c:2e:eb:c6:9e:81:37:91:c8:83:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate designsystem.bakerhughes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for designsystem.bakerhughes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

designsystem.bakerhughes.com

Other certificates including the domain name bakerhughes.com

(limited to 100 certificates)
wlrtwh.welllink.bakerhughes.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com

Certificate

The complete raw certificate details for designsystem.bakerhughes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377242919857063488212987853411341388517228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 20:14:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-03 20:14:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'designsystem.bakerhughes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736345640633028062184102808506242402370950639019187621261399328565206399057074199872428003349189227982516975782391121173655286675511769829704611408951382281490019937092732574354912978883750285420986569918205548587853860349707016524709027054792752445263371959717780565810103373231194287183586822826786632226489318844523554729329286131512940312586919167675571125530521220567119542652028617409380872373510896168679581223819585112460380948363905102887703628343208987100165441133167106836970944992778859888687437399242912066549802920377879994114780494943665836860181181982669338048794093762329938911754463936013952092733588147787086973383395773175202087162794349061485108382664258156618528439270810833463972287902141885379311538657336334378233744481763515638218304536796906824495577263846613600642057810885644841458128460696911162288954488421131298498553611389210851266467359908685810985011259839373623974933253933071258589631135189128126198916429912379703869985609667212319336632894824586931991978128227405574116770165935914386097448840014887452875917389286174759496793783738815138122643634025372777876595027184087248102225623128212140596348840027085855200825000024298216126640910537876461926163245621312749167162283993409408437223119667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8028b981432dbab04f7fca4d0c1baf8c2b0e921f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designsystem.bakerhughes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e21cb47430000040300483046022100e14323bcba9db6a41f49e149c4f053ff0dd4242860e5fb195cbbf3c64ac5b7d9022100d254a1a28505bd04781fd2aa920b13f4bc6c4810c1dfe044e8617f963361fa7200760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e21cb476800000403004730450220064ce372667bf2c946dedd2ac08f3d9e05da349b2a9c35a7aae595cca4720090022100badbded698178cf14e05f192c52f0da09fd5d72884ad3e7a8f70ad9280fbd0b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084764dbdf7053ee9366eb155f92a0f441a91f7249e7a284a8c3d98abe4500a1ddfdc4119a382c4dacd2d38041040197e6ad4a50c9d8d0e93c99cbddc5f3990fb33980a5d1d6bd3f3f6ac2b29bfd670594a3c9508e8fa3b2134867a1a56b16c674f744854fcac8e315933437d03d70a587f309829994824370797212e5efdd772b26ecac95737010ed7630e0431bd842b5bb348f6f7b3049fa0ba576f707ccc35650f6b0fb684a4986abee4dc6d8e5390de1ac54918d8d044f8d19d3af47ab0234422f230cedc47de91bea8e73dc584cf8dc2eb7f711df0b9272341a3723cdcce69b53d1842e35ea488626643c4b2cffed1b132328cc29a8d48e76f845cc3d42f