pqa-stage.us.oracle.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:71:44:ee:b4:40:bd:f8:aa:aa:53:d1:1e:ed:03:12 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle CORPARCH US
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:71:44:ee:b4:40:bd:f8:aa:aa:53:d1:1e:ed:03:12
Serial Number (int): 16538863610374722840023781655790289682
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2a:9d:9c:c5:e8:35:e9:3b:6a:8a:85:82:a5:38:c4:d8:99:04:24:b4
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a5:9d:62:02:7d:81:84:4d:46:3a:cc:83:90:52:6c:83:53:98:40:66
Fingerprint (sha256): 01:64:35:51:36:73:86:51:23:a1:6f:dd:8b:b5:3a:5d:f9:c6:13:8e:66:b2:0c:07:3d:8f:bf:b1:83:3f:e7:f2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate pqa-stage.us.oracle.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pqa-stage.us.oracle.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pqa-stage.us.oracle.com

Other certificates including the domain name oracle.com

(limited to 100 certificates)
dockerhub-eloqua.us.oracle.com
uingv4001.us.oracle.com
wfivm01803.us.oracle.com
monacotest.us.oracle.com
cdpap.oracle.com
msp00adi.us.oracle.com
brmdc-ise-mg-3.aaa.oracle.com
aqaoraapp7.us.oracle.com
kkm00edj.in.oracle.com
den01xjs.us.oracle.com
www-stage.oracle.com
academy-stage.oraclecorp.com
hq-bps-staging-2.us.oracle.com
test.oracle.com
*.db.dc2.c9qaga.us.oracle.com
brmdc04-102-ja2500-1-vip.us.oracle.com
unifiermobile.in.oracle.com
wfdmzvm00629.us.oracle.com
opnec-vpn-us.oracle.com
slc17jyk.us.oracle.com
stg-cloud.oracle.com
championsnews.oracle.com
desktop-alt.osc.oracle.com
tyo-ips-2.jp.oracle.com
ilearningtest.oracle.com
adc-ips-11.us.oracle.com
appwfdmzvm00536.us.oracle.com
whq-ips-1.us.oracle.com
den02pil.us.oracle.com
lb-iad-peonetworking2-gxp-prod.oracle.com
llg00cej.uk.oracle.com
dev-project-log.us.oracle.com
leochat.us.oracle.com
download-secure.oracle.com
aqaoraapp16.us.oracle.com
gmp-dev.oraclecorp.com
pout.no.oracle.com
slc05cty.us.oracle.com
osnstaging-prod.oracle.com
msp52859.us.oracle.com
sgdsca.osc.oracle.com
den00sen.us.oracle.com
brmepoapp02.us.oracle.com
adcfodldap02.oracle.com
utiltw.tw.oracle.com
retailfortify.us.oracle.com
psfdr-prod11g.us.oracle.com
oecet.oracle.com
busgf1203.us.oracle.com
hidmp0761.us.oracle.com
ca-oltf-services-ps.us.oracle.com
den02mbg.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
llg-q2-ips-2.llg.oracle.com
auc02mgr.us.oracle.com
rodgwf02.oracle.com
ngcc-sit-integration.oracle.com
www-legacy-stage.oracle.com
aolesc34.us.oracle.com
odc-addthis-prod-01.oracle.com
jpidgv0001.jp.oracle.com
rws3270880.us.oracle.com
busgl0910.us.oracle.com
jiuhua.cn.oracle.com
*.us1.cloud.oracle.com
bma.us.oracle.com
den02azy.us.oracle.com
hdssimphony.uk.oracle.com
jpsh-expc-2b.jp.oracle.com
salescentral-dev.oraclecorp.com
slc01bgk.us.oracle.com
docs-uat2.us.oracle.com
den00lkj.us.oracle.com
msp00bcg.us.oracle.com
epdc01odgwe02.oracle.com
omm-stage.us.oracle.com
mandaprimavera.oraclecorp.com
dnovmlx44.us.oracle.com
pqa-stage.us.oracle.com
aserp2010.oracle.com
osnstaging.oracle.com
retriever.us.oracle.com
ospct.oracle.com
kkm00ckx.in.oracle.com
slc04yqt.us.oracle.com
mydesktop-mig.oraclecorp.com
championsnews.oracle.com
apex-ext-stg.appoci.oracle.com
rgbu-mfpeecs-qaedc01ab-ext.us.oracle.com
wfdmzvm00555.us.oracle.com
slc10akr.us.oracle.com
lb-drc-nonprod-int.oracle.com
utilus.us.oracle.com
den00gyi.us.oracle.com
userp2040c.us.oracle.com
slc040oodstor17.us.oracle.com
rws3270872.us.oracle.com
*.db.dc2.c9qaga.us.oracle.com
jdash.se.oracle.com

Certificate

The complete raw certificate details for pqa-stage.us.oracle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16538863610374722840023781655790289682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle CORPARCH US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pqa-stage.us.oracle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657463049066389995581081989166096422172010478422011749305090676514289485810132575779819595532925079707650831808853490079488461104974162872106106628651576342000521446449125810116866006672658286289506398381963611788666160921736137022034109386191733028857188427502511745923844361003168575528608687382132460101429043264069868767482539466571442433491233361394987094183289948154692796180007347253870486305698941586569136788235381674004466857761947405492395926779704370756764393793998463950320556684431004976858033575420952097074863626710906324476548246026334013528041054712632748102666469188891156590147334941076127948426106989118966619913378291941790425120546020424880839247923220832982005002884831097255614372645000677566043705894851555632881849187188182350280754288452921753308095657338789136648689586696426827386796002328916502975844533857071207596088955726652819678938189360547919388631632359704721100968582679632436027696838868238681428867878717066794042285399855058647795561125402671218087500596460125502836549754235198198574199304354691719079142454432575550212292872915155620103801571553429601214272121741440057901334885391381765447701728821848561594554209681275118088077862890870844282445568268614044630791320658847585009123419337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a9d9cc5e835e93b6a8a8582a538c4d8990424b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqa-stage.us.oracle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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