placesmanager.api.here.com

- HERE Global BV -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 08:7e:18:7e:c5:46:bd:a6:13:f9:fa:81 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HERE Global BV

Organization: HERE Global BV
State / Province: Noord-Brabant
Locality: Eindhoven
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7e:18:7e:c5:46:bd:a6:13:f9:fa:81
Serial Number (int): 2628320407142803779538778753
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 59:98:37:97:ee:41:6a:a8:ae:8f:d5:27:a3:01:ec:1f:4a:79:9d:b9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 8b:88:cc:12:71:97:29:78:77:79:29:91:4e:48:cd:98:03:26:aa:08
Fingerprint (sha256): 01:c0:0c:1a:00:6b:b0:68:00:36:18:44:4e:ad:a9:5e:07:44:e1:5a:4e:36:2b:21:74:58:98:2e:d7:41:52:84

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate placesmanager.api.here.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for placesmanager.api.here.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

placesmanager.api.here.com

Other certificates including the domain name here.com

(limited to 100 certificates)
qa.rd.account.here.com
proxy.refclient.ext.here.com
xyz.api.here.com
graf.eventbroker.api.here.com
eu.scbe.api.here.com
san3.here.com
test.here.com
cit.ppc.hub.api.here.com
*.tracking.here.com
amum.cit.cc.api.here.com
cloudmaster-staging.thor.data.here.com
artifact.api.platform.here.com
demo.acs.ext.here.com
pchilyncFEpool.ad.here.com
patlmta05.core.in.here.com
*.izumi.ext.here.com
listings.in.here.com
myphone.uc.here.com
st.backstage.here.com
*.slp.pos.here.com
*.stg.navigation-voice.data.here.com
admin-service.api.platform.in.here.com
mgat.ext.here.com
api.release.in.here.com
amum.ctt.cc.api.here.com
stg.mapfeedback.here.com
navigation-voice.data.here.com
scd.pipelines.platform.here.com
Pamsdc22.ad.here.com
corphyperion.ad.here.com
avalon.lastmile.aws.in.here.com
splunkforwarder.ppc.hub.api.here.com
mgat.ext.here.com
pamslyncpool.ad.here.com
splunkforwarder.3dearthcore.here.com
qa.primeplaces.here.com
*.data.api.platform.here.com
image.maps.cit.api.here.com
*.3dmap.here.com
traffic.cit.api.here.com
dv.feedback.here.com
traffic.ctt.api.here.com
mapcreator.here.com
emtadmin-prod.in.here.com
*.dev.had.in.here.com
grafana.metrics.int-2-aws-us-west-2.k8s.in.here.com
jaguarshop.here.com
refroute.routing.in.here.com
partneruniversity.here.com
emprovisioning.prd.prd-1-aws-eu-west-1.k8s.in.here.com
splunkforwarder.cofense.here.com
myphone.uc.here.com
pipelines.api.platform.in.here.com
*.traffic.data.here.com
cap-test.places.dev.api.here.com
uatspca.in.here.com
qa.collector.data.here.com
cpdev.aws.in.here.com
placesmanager.api.here.com
*.apf.in.here.com
access-change.api.platform.here.com
cit.tracks.here.com
intranet.here.com
binary.scbe.sit.api.here.com
rd.account.here.com
*.rendering.in.here.com
mack.it.here.com
PCHIDC03.AD.HERE.COM
int.account.here.com
*.cdn.places.cit.api.here.com
odin.in.here.com
wse.cit.api.here.com
placesmanager.stg.api.here.com
sit.saas.awsmarketplace.here.com
map.hybrid.ccv.api.here.com
route-oet.hybrid.cc.api.here.com
hapi-datastore-proxy-perf.platform.sit.here.com
pipelines.api.platform.here.com
*.consent.api.platform.in.here.com
marketplace.api.platform.in.here.com
saeljira-dev2.it.here.com
san4.here.com
palamida.in.here.com
sca.api.in.here.com
enterprise.here.com
placescontent.nokia.com
*.blob.data.api.platform.here.com
email-quarantine.in.here.com
scbe.api.here.com
maphub.cit.api.here.com
svip.it.here.com
wotan-stg.in.here.com
splunkforwarder.positioningapi.here.com
maphub.cit.api.here.com
resource-access.api.platform.here.com
nps.sit.data.here.com
origin.prd.cld.vcdn.data.here.com
confluence.it.here.com
*.artifact.api.platform.in.here.com
traces.sit.api.here.com

Certificate

The complete raw certificate details for placesmanager.api.here.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvJ4c+M8vFS4AT/n57Ib
0rHcmLPRKid/2UIMWcsSDe7t6MO3CSbMp7E7ce/RyJ17m92FAw4Tz9eoFTDF9AoC
FJcJm3ZpinSRjxexnZtagjp3JeIqQl33ajRaQ9/CfOOowA6JnH1ozMO3vEWXobwr
A6usbpnk93Gd6OtW3cVvxyN+N+ATYx4Ue0fthy6Xm71ml0JlNcrOlFJxZ9nw9tWg
tVyqnsMW0r29n4nMj3DcSUCz5u/TJ9zhnvuGv1OC4mhRdqApRg433x/jJMx4Yp9s
zuYvDnrvl/ybMQcjtd7oF7bKv/ZnvPwaMoqZWX5OvYKJ+h3qZVdLnQCqN88yMTyp
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2628320407142803779538778753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 15:11:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-21 17:21:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Brabant'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eindhoven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HERE Global BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'placesmanager.api.here.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22589984952845474879302743829549512836492179227500163890985670046332916779868186172533548370287901024803780361978577803327115430602726079943451852382824601410662304066144609887828466038331174975823285651796310671267765174335366267148696081383755904926786456091495473973377663373403434722123617911209727457194483261501996337150794228028704290404518503529592118038929901167500773406816438118869866598319298300221515221689140731557385602333873571756919936783042271648376867201915462596019712926616537352286376972056043268269899575075552891061882396079487202721764803927670948623900731323825176376310070003385794092116281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placesmanager.api.here.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59983797ee416aa8ae8fd527a301ec1f4a799db9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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