uhg2-prod-green-cdn.adobecqms.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:5e:04:74:ed:38:3c:7c:22:df:ed:7c:3c:8f:62:71 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uhg2-prod-green-cdn.adobecqms.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:5e:04:74:ed:38:3c:7c:22:df:ed:7c:3c:8f:62:71
Serial Number (int): 13780446256072631592920219973051179633
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:8f:48:f8:aa:72:86:60:7c:9c:a6:0f:e9:d5:96:1a:b0:15:c7:dc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 7f:5d:f9:0a:c9:23:a4:94:f3:0a:5e:9d:85:53:39:ce:d6:ff:03:6e
Fingerprint (sha256): 02:9a:29:34:fa:5c:59:e8:fc:5f:68:5d:c7:52:10:a8:60:9f:ee:ca:cb:c7:6b:55:52:b2:cb:f6:b6:a9:99:b2

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate uhg2-prod-green-cdn.adobecqms.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uhg2-prod-green-cdn.adobecqms.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uhg2-prod-green-cdn.adobecqms.net

Other certificates including the domain name adobecqms.net

(limited to 100 certificates)
*.adobecqms.net
cibc.adobecqms.net
*.adobecqms.net
dlh.adobecqms.net
synopsys.adobecqms.net
change-healthcare-operations-llc.adobecqms.net
invocare.adobecqms.net
*.adobecqms.net
*.adobecqms.net
fcadealer.adobecqms.net
*.adobecqms.net
expedia-gco.adobecqms.net
*.adobecqms.net
*.adobecqms.net
dhs-oha-stage.adobecqms.net
metrohm-sites.adobecqms.net
aem-commercial-skyplus6e.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
teknor.adobecqms.net
*.adobecqms.net
cedarssinai.adobecqms.net
*.adobecqms.net
uhg2-prod-green-cdn.adobecqms.net
adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
tiaa.adobecqms.net
acca-65-prod.adobecqms.net
*.adobecqms.net
*.adobecqms.net
jpmc.adobecqms.net
ntt-docomo.adobecqms.net
flinders.adobecqms.net
americaneagle.adobecqms.net
*.adobecqms.net
*.adobecqms.net
dhs-ocio-lc-stage.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
*.adobecqms.net
tmg.adobecqms.net
uhg2-qa-cdn.adobecqms.net
*.adobecqms.net
*.adobecqms.net
taj-hotel-group.adobecqms.net
*.adobecqms.net
*.adobecqms.net
marketo.adobecqms.net
greendotcorp.adobecqms.net
*.adobecqms.net
*.adobecqms.net
harley-davidson.adobecqms.net
lseg.adobecqms.net
puig.adobecqms.net
boots-uk-limited.adobecqms.net
accounts-361647230075.ch.adobecqms.net
brunswick.adobecqms.net
boozallen.adobecqms.net
usaa.adobecqms.net
*.adobecqms.net
*.adobecqms.net
signify.adobecqms.net
*.adobecqms.net
vw-america.adobecqms.net
*.adobecqms.net
kaiser.adobecqms.net
hapaglloyd.adobecqms.net
*.adobecqms.net
signifycooper-acc64.adobecqms.net
*.adobecqms.net
coinbase.adobecqms.net
*.adobecqms.net
*.adobecqms.net
stage65.prh.adobecqms.net
kporg.adobecqms.net
whirlpool.adobecqms.net
*.adobecqms.net
*.adobecqms.net
lenovo.adobecqms.net
*.adobecqms.net
hsbc-eu-dxp1.adobecqms.net
viasat.adobecqms.net
*.adobecqms.net
elcorteingles.adobecqms.net
severntrentwater-asec.adobecqms.net
lloydsbg65.adobecqms.net
*.adobecqms.net
carlsberg-dev-65.adobecqms.net
imperva.com
tetrapak.adobecqms.net
*.adobecqms.net
*.adobecqms.net
reedexhibitions-stage-64.adobecqms.net
sciex.adobecqms.net

Certificate

The complete raw certificate details for uhg2-prod-green-cdn.adobecqms.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/a+xEjBbpI4veHcgYPB
6RVqDXfdgad+jjKMjgGX2wNUDdIYjtbIwVEc4sIwK4zK1ZeWQwnL6NSbJROT97tB
4MaMd6yGSOMj0aum2UEqXpu3BODSCjLdM8dtuC+Du+yyMDVVpCZzNvYyK9spsZWR
pYtR9ZixmWSw17buF5Ph03jmC23a3zZSia/3iWjSwAyUST40tue3wcC534Wsduud
sGQW1xzeihh2E5XCPLNz97y2mXKTKHMUxOxeIZXGhT1+g269B0O9+/wu9DgzSUW3
UUyKyVyy0KCVMWtZV8rXht+1e/XmY70Vm+3O+zrj2HawN1PNSR9+KLjXZcXYgcoB
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13780446256072631592920219973051179633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uhg2-prod-green-cdn.adobecqms.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23223284393182546534586423669411936778782918840071022997339199966635926309678818468170349466469913584419301288249514970513417088594090665068543660971793547847968718703584496261657243718701409513014246228304042029273052382499317031782076864818524362836484698038627805771681391930151015868095278443400793360619648503297468158245578381040078630311534408172712564867392611451190926065287950916604391933192157619181612206141969749940093088768124550009203397013244607032377571942636799398971664179089092947881413209076743081698503899418819675358352962865343320024422957232797471530358990810465657860919072099171983384248829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							568f48f8aa7286607c9ca60fe9d5961ab015c7dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg2-prod-green-cdn.adobecqms.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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