paspricing-dev.ey.com

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 54:38:e3:a2:85:8f:35:c9:1f:49:89:4a:2b:df:d1:61 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 54:38:e3:a2:85:8f:35:c9:1f:49:89:4a:2b:df:d1:61
Serial Number (int): 111950537253287876605043848097474531681
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: aa:61:ae:89:bf:22:9d:a5:7d:9c:4b:0a:51:6b:3b:8d:96:10:1d:01
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 28:ef:26:d2:64:87:24:d8:d4:df:4f:5d:13:93:65:c8:0a:37:ff:78
Fingerprint (sha256): 00:ee:30:a4:83:0d:e6:b5:40:a4:df:bb:03:dc:81:16:c8:e4:e9:cb:c3:13:d2:0d:0b:4e:b1:31:e0:a7:e1:98

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate paspricing-dev.ey.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paspricing-dev.ey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paspricing-dev.ey.com

Other certificates including the domain name ey.com

(limited to 100 certificates)
www.payrollportal.ey.com
lan-199-ext.ey.com
eycwa.ey.com
ameyrcf01.ey.com
uat-pmsketchbook.ey.com
gemcms-api.qa-fix.ey.com
tls.automattic.com
qa-coreservices-mobility.ey.com
de63u.ey.com
appleTest0805.ey.com
admin.eytaxbriefing.ey.com
cb.catalyst.ey.com
asegateway-aue.ey.com
apacadvisorybbwy.ey.com
avepoint.ey.net
questionapi-npe.etfv.ey.com
gateway-api-gwc.ey.com
idsftpstg1.ey.com
edna-uat.ey.com
www1.payrollportal.ey.com
eyots.nlg-uat.ey.com
tprp-sandbox.ey.com
de01.eydmz.net
lss-dev.ey.com
eyce-pptools-dev.ey.com
cert00078-azurecdn.akamaized.net
lan-184-ext.ey.com
globalmarkets.xd.ey.com
gtp-stage.ey.com
gateway-api-inc.ey.com
acuityportal.ey.com
athenaproxyapid.ey.com
cert00078-azurecdn.akamaized.net
aai-154-uat.ey.com
ameyrcs01.ey.com
plcarmen-stage.ey.com
cert00078-azurecdn.akamaized.net
tms-109.ey.com
lan-145-ext-we.ey.com
eyvapps-web-uss.ey.com
Analytics.ey.com
cert00042-azurecdn.akamaized.net
aramco-dev.superset.ey.com
survey.demo.change-insights.ey.com
validator.ey.com
slot1.admin.ttt.ey.com
mtt-staging.ey.com
eroom1e.ey.com
eyd-de.ey.com
reckitt.change-insights.ey.com
eyd-de.ey.com
cert00078-azurecdn.akamaized.net
spotfire-hk.ey.com
wotcbics2-stg.ey.com
d2.taxsuite.ey.com
base-api-uks.ey.com
paspricing-dev.ey.com
agility-ipaas-integration-nonprd.ey.com
ca-climate-analytics.ey.com
lan-227-ext.ey.com
dev-canadataxapps.ey.com
eventsink-eunorth-nonprod.ey.com
signinghub-uat.ey.com
ci-dxc-reporting-trac.ey.com
rise-uat.ey.com
webforms.ey.com
VATAnalyticsqa.ey.com
Usn101u.cloudapp.ey.net
www.rpnn.ey.com
askey-uat-web.ey.com
demo.vcsync.ey.com
cincinnatichildrens.eynavigate.ey.com
tasdigitalexperience-uat.ey.com
labpages.braze.com
us.eyos-wapi.ey.com
modelops-uat.eyfabric.ey.com
athenaq.ey.com
TestUpdateOwnerAzureKV20.ey.com
www.highq.com
vedlys.ey.com
AM02.EY.COM
admin.eytaxbriefing.ey.com
cesa22.tpweb.ey.com
neapp01.mdrnp.ey.com
tms3-stg.ey.com
uat.proposal-engine.knowledge-engine.ey.com
alumnihub-qa.ey.com
eyvapps-api-swn.ey.com
payrollcontrol-uat.ey.com
EYRCPAEDCF.EY.COM.ey.com
requestforevidence-portal-aue.ey.com
eyres.nlg.ey.com
Portal.catalyst.ey.com
Conversation-insights-digitalassistant.ey.com
au-ereview.ey.com
qa1-gcs-gsp-pathway.ey.com
uat-paansadminconsole.ey.com
web004.ey.com
cn-director.ey.com
POLTT.ey.com

Certificate

The complete raw certificate details for paspricing-dev.ey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnGe4NbdYc2uEt2sUooc
5z5xbjbuZOEV+hs0/8hFK2EleZ1x1UaIeC8L7kyz+hCmvh9dad1RPwcX/4UZ0mNc
Y0KIbxm1VfK5zii2mM2oZeZA7tNYGdv7lc+HXZ3LVQYCARMDKa4MD0YFYzsZHBS0
1l4OGf4vscd7F4TRKE9uB1lEGKo6brljIcOv7KtC3b4oZ4zmhdBX1cUaLx2DL9M2
IdLp/M9tO4W5Ryu1ArFYzOxMr4JBralbX8oYm1SMJif/VpcibBZz19YVrXGDQ26r
muTV5z8NxTlRJ4rUiIlV62oD5FJTI8dZmZrGdgRNXHGqDEBLuUZPmBbD38C2KpJj
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111950537253287876605043848097474531681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 10:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-01 10:36:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paspricing-dev.ey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22021493479173569412862643468172738149724057337857825006929340137403327775239816716702183715972897647801084676137337442560473537942367433410697058129377070488655976351810250435817798897777542454740471763247116167059380097664226324125860542108909023979286474831584854232506650415648041292801167241422966774246100627572364226139096273320118509758384871505877979822989612603096976501360563009668524954599321008403012665991657215471829535026347226068662093154163371499617228417425755111978681237196569615274018256114549594472083339243588319567771042700900303061313885238134788136658740631606922064947100192286325483922319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa61ae89bf229da57d9c4b0a516b3b8d96101d01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paspricing-dev.ey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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