rapcustomerportal.pde.spratingsvpc.com

- S&P Global, Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:95:07:e6:93:d1:16:4d:0c:7b:4d:a9:08:c4:7c:da was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

S&P Global, Inc

Organization: S&P Global, Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:95:07:e6:93:d1:16:4d:0c:7b:4d:a9:08:c4:7c:da
Serial Number (int): 19383004418002182633193454289715231962
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1e:fd:3d:5e:d0:92:9d:fc:4f:c6:ab:43:0c:ab:ad:61:8b:d9:cb:e9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6a:44:68:f9:7f:ac:9f:e2:62:c7:8f:28:55:41:6c:46:64:7a:43:9b
Fingerprint (sha256): 03:a7:31:11:ad:ff:79:08:21:40:a2:80:de:7c:98:67:d5:b0:f5:4d:f7:90:cc:42:b4:79:fd:c4:f4:69:a3:45

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate rapcustomerportal.pde.spratingsvpc.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rapcustomerportal.pde.spratingsvpc.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rapcustomerportal.pde.spratingsvpc.com
levelr.rapx.spglobal.com
rapx.spglobal.com
www.levelr.rapx.spglobal.com
www.rapx.spglobal.com

Other certificates including the domain name spratingsvpc.com

(limited to 100 certificates)
spcom.alpha.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
rapcustomerportal.pde.spratingsvpc.com
*.caasw.pde.spratingsvpc.com
spratingsvpc.com
spcom.alpha.spratingsvpc.com
spratingsvpc.com
spratingsvpc.com
spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas-dmz.pde.spratingsvpc.com
*.faas.qa.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.pde.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
artifactory.pde.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.cfk.dev.spratingsvpc.com
*.msbx.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.uat.spratingsvpc.com
spratingsvpc.com
*.faas.msbx.spratingsvpc.com
spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.msbx.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
*.zfaas-poc-127.msbx.spratingsvpc.com
spratingsvpc.com
*.caas-dmz-pub.alpha.spratingsvpc.com
*.zfaas-poc-127.msbx.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
spratingsvpc.com
*.faas.uat.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas-dmz.pde.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
spratingsvpc.com
spratings-dmz.alpha.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
*.faas.pde.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.pde.spratingsvpc.com
*.faas.dev.spratingsvpc.com
spratings-dmz.alpha.spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
spratings-dmz.alpha.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
artifactory.pde.spratingsvpc.com
*.caas.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
spratingsvpc.com
*.faas.dev.spratingsvpc.com
*.zfaas-poc-127.msbx.spratingsvpc.com
*.faas.msbx.spratingsvpc.com
*.faas.dev.spratingsvpc.com
*.faas.dev.spratingsvpc.com
spratingsvpc.com
*.harling-test.msbx.spratingsvpc.com
*.zcaas-poc-127.msbx.spratingsvpc.com

Certificate

The complete raw certificate details for rapcustomerportal.pde.spratingsvpc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8V83CikCtAothhUQ+7oZepT5yVbG
34Pw9EqEEgLAfv0IWA6fLKSuM2+6ifwZeQ/aZOWRr3rIWC6LPNGR2WRSdw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19383004418002182633193454289715231962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S&P Global, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rapcustomerportal.pde.spratingsvpc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f15f370a2902b40a2d861510fbba197a94f9c956c6df83f0f44a841202c07efd08580e9f2ca4ae336fba89fc19790fda64e591af7ac8582e8b3cd191d9645277
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1efd3d5ed0929dfc4fc6ab430cabad618bd9cbe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapcustomerportal.pde.spratingsvpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelr.rapx.spglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapx.spglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelr.rapx.spglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapx.spglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018125b6fdda0000040300473045022004490e70d0aec10bdccd96547570e11ab97043c00ee7f57e2b153a0d92d7769e022100f4422cf98ec0f19d10b78d190f1d864036e9f59423623d03a8a31785ed5facf700760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000018125b6fd310000040300473045022034942ae335d8b37ae23c8955e1ca7df3b790345cbbeb9a63a36c2900532e5e7b022100b1cff72009e5d7b717e65aa87b239cea3c6fc02bc88a894b2a325947fa9e5a9e007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018125b6fd6c00000403004830460221009f27d9aae8652c48d33259e98af338b368b2faf41d8067a2c9a21b2330c1ceda022100fd300cf29bd044d333a573f36adbc8a8cfe0577fe738fea777e502d0121f3387
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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