dev-eddl.cdi.services.sap.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:81:5c:ae:3d:5b:7d:d4:b8:89:e1:2c:95:7b:75:06 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-eddl.cdi.services.sap.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:81:5c:ae:3d:5b:7d:d4:b8:89:e1:2c:95:7b:75:06
Serial Number (int): 13963966038973156997296738788615877894
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3e:de:2b:11:39:89:3c:49:ff:fa:a1:9d:de:fb:86:6f:bd:f1:04:27
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 83:ee:3b:e4:8f:96:56:24:17:25:f6:72:eb:91:8c:04:3d:25:fd:9b
Fingerprint (sha256): 03:47:1a:2d:5f:7a:b2:98:41:c8:6e:7b:a7:86:5d:a7:5c:d8:aa:6b:8c:43:7c:1e:99:67:3e:7c:7e:17:e2:37

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev-eddl.cdi.services.sap.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-eddl.cdi.services.sap.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-eddl.cdi.services.sap.com

Other certificates including the domain name sap.com

(limited to 100 certificates)
iccsrm.sap.com
news.sap.com
service.education.sap.com
community.sap.com
connectdasg.sap.com
solutionexplorer-test.sap.com
access.co.sap.com
forums.sdn.sap.com
statuspage.io
lync.co.sap.com
service.sap.com
*.dm.ux.sap.com
experience.sap.com
liveaccess.sap.com
cloudportal.sap.com
rapid.sap.com
mna-onboard.sap.com
keycodepartner.sap.com
influence400.sap.com
applications2.sap.com
support.api.community-qa.sap.com
people-qa.sap.com
spotlight.sap.com
lync.co.sap.com
smpdlus.sap.com
alerts.nmppenergy.org
*.sapevents.sap.com
boardroom-demo.sap.com
*.services.sap.com
servicesdev.tdc.sap.com
store.sap.com
ga.support.sap.com
sapappcenter.com
apps.support.sap.com
akamaisecure.qualtrics.com
swdcdownloads.sap.com
activities.sap.com
scn-qa.sap.com
int.preprod-resolve.sap.com
fqa.b2b.sap.com
tradeworld.sap.com
leadhub.sap.com
status.melodydns.com
irpstatus.streamlineit.ca
connect.sap.com
status.activtrak.com
billview.sap.com
sqlanywhere-forum.sap.com
akamaisecure6.qualtrics.com
secure04.stage.lithium.com
relayserver.sap.com
hana.sap.com
socialsignin.sap.com
almsummit.go10.events.sap.com
dev-eddl.cdi.services.sap.com
impactstatus.validic.com
solutionexplorer-test.sap.com
impactstatus.validic.com
alpha-status.iole2e.iolportal.com
dlgce.sap.com
qas.b2b.sap.com
statuspage.io
statuspage.io
sdn.sap.com
statuspage.io
activities-stag.sap.com
secure04.stage.lithium.com
cw400.sdn.sap.com
www.sap.com
connectda.sap.com
cx.sap.com
www.experience.sap.com
people-stag.sap.com
statuspage.io
consolidation.community.sap.com
servicedesk-dev.sap.com
influence400.sap.com
estado.medios.com.ar
preview.api.community-qa.sap.com
people-stag.sap.com
open.sap.com
blogs-qa.sap.com
www.sme.sap.com
applications1.sap.com
servicedesk.sap.com
boardroom-demo.sap.com
origin.softwaredownloads.sap.com
estado.medios.com.ar
store.sap.com
uc16.janrainengage.com
akamaisecure7.qualtrics.com
training.sap.com
impactstatus.validic.com
blogs.sap.com
sqlanywhere-forum.sap.com
me.sap.com
events.sap.com
itc.sap.com
statuspage.io
mywtsmobilephl.sap.com

Certificate

The complete raw certificate details for dev-eddl.cdi.services.sap.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2grp3zGuN2D4Wit/OPbB
w+9oBMQ97xyUIQ3H+5mNOtbe4L0ycBfHN+mZ/MXtdQZLhcOvVvmqcz2xzA0NOCDO
XmGr+Nn1H8852nNnq6cnv3vQDvCusQYpESWlMNEPfSIn6uk0HA5Is/6xK81A3RUG
GK9zm7raMLY4Hx3Tu2BtrllbtM6k6X2sSi1aAEnvf5rWOtWdRS5TTnrY+uDXbI4C
3Ps+fG20nxlXr56lqbnQbF0/6exdaJxKU0nEJr+/dHDZj1NbCAta40nM0odhKhMA
V/EjgbOtnXtBFh1ZEWa19kH+tO7KGk5xB5BxK9ixXlWbiLGCv/7wkmSPJHQrHekX
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13963966038973156997296738788615877894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-eddl.cdi.services.sap.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27525332160561983868850631120586557835670310654408562724146692943899434882365849128522173120165329345770873943544528650049204625839610441665439579359283158879252258716591264867522994807998663519713619532325929432852239500203468166809783673199242122108649168566779311830587697505898083899307971278918311001833410027791420974632287661557021225763197691564058773499911528727656225657032608712309427948586138436983015032065635016611277964975556262562821779305449266406394229892205644212315439022377988722779873851529541505247843947937671012021677419511927673695994460741286596857022444553131517550659750987451298684147701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ede2b1139893c49fffaa19ddefb866fbdf10427
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-eddl.cdi.services.sap.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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