api.sequencing-design.designstudio-staging.illumina.com

- Illumina Inc -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:8e:e3:25:8b:4e:25:cf:b5:ba:49:92:b4:18:8c was issued on by IdenTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Illumina Inc

Organization: Illumina Inc
State / Province: California
Locality: San Diego
Country: US

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:01:8e:e3:25:8b:4e:25:cf:b5:ba:49:92:b4:18:8c
Serial Number (int): 85078682125669115063075485917904115852
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2b:e8:3c:b1:ae:87:28:7f:85:64:7d:36:2d:54:b0:97:70:f6:fa:52
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): 59:4f:f5:0d:3d:dc:b4:5a:6c:fc:2d:db:11:85:af:17:39:29:f5:d5
Fingerprint (sha256): 03:fa:00:09:46:fb:86:21:9e:1b:bb:b4:60:68:2f:db:d0:3c:4d:65:1a:63:7a:4c:de:14:7d:7c:fe:32:59:c5

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate api.sequencing-design.designstudio-staging.illumina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.sequencing-design.designstudio-staging.illumina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.sequencing-design.designstudio-staging.illumina.com

Other certificates including the domain name illumina.com

(limited to 100 certificates)
secure07.stage.lithium.com
ussd-prd-arcp01.illumina.com
ussd-sbx-zpac06.illumina.com
sapgtsprd.illumina.com
lims-rc.illumina.com
dev.rancherpd.illumina.com
dev-prdt.illumina.com
ipp-dev.illumina.com
sgnt-dev-zpac04.illumina.com
lab.adamshealthnetwork.org
instrument-scheduler.ils.illumina.com
sapmiidev.illumina.com
tableausbx.illumina.com
adm-fab-san-prd.illumina.com
prdt.illumina.com
devchat-bluejeans-service.aws-prod.illumina.com
incapsula.com
vault.oad.illumina.com
cpc-jenkins.ep-np.illumina.com
incapsula.com
cds1.cvent.com
grr.illumina.com
ussd-prd-dswb03.illumina.com
gokpi.illumina.com
eventregistration.illumina.com
tst2.etpsolr.illumina.com
*.subscription.illumina.com
supportassets.illumina.com
ontology.testing-domain.illumina.com
*.iron-tst.illumina.com
rancher-vye.aws-dev.illumina.com
UKCH-PRD-SNMD02.illumina.com
*.cloud-test.illumina.com
sso.login.illumina.com
www.alexhang.com
cds1.cvent.com
www.illumina.com
api.sequencing-design.designstudio-staging.illumina.com
tierboard-dev.illumina.com
wgs-preprod.illumina.com
controlmdev.illumina.com
*.docker.illumina.com
cds1.cvent.com
api-tst.add.illumina.com
expwy.apac.illumina.com
components.illumina.com
use1.deso-prod.cpo.illumina.com
www.providerportal.ils.illumina.com
othrys.olympia.k8s.backend-dev-aws.illumina.com
software.radiance-design.illumina.com
finvivirstatus.mambu.com
secure07.stage.lithium.com
tls.automattic.com
*.cloud-test.illumina.com
ipp.illumina.com
softwaredownloads.illumina.com
ussd-dev-zpac04.illumina.com
ussd-ftp.illumina.com
company.ensvee.com
ussd-dev-smap01.illumina.com
ussd-tst-etpw01.illumina.com
ussd-prd-hpad03.illumina.com
vaultdev.illumina.com
ashg2020.illumina.com
*.basespace.illumina.com
*.rancher-dev.illumina.com
cds1.cvent.com
inotifications-dev.illumina.com
sapeccprd.illumina.com
finvivirstatus.mambu.com
hub-dev.illumina.com
solr-ldap-service.illumina.com
login.illumina.com
incapsula.com
usma-prd-rdgw01.illumina.com
cds1.cvent.com
blog.infra.illumina.com
rancher-thtf.aws-dev.illumina.com
*.cloud-naboo.illumina.com
myaccess-sbx.illumina.com
secure07.stage.lithium.com
ussd-prd-clms02.illumina.com
platform.illumina.com
rancher-test.aws-prod.illumina.com
ukga-prd-hpov03.illumina.com
esb13-n1.illumina.com
incapsula.com
secure07.stage.lithium.com
finvivirstatus.mambu.com
*.testing-domain.illumina.com
*.ca.basespace.illumina.com
*.oad-aws.illumina.com
ussd-prd-snmd04.illumina.com
ussd-prd-okta01.illumina.com
secure07.stage.lithium.com
delivery-api-bssh.ils.illumina.com
cds1.cvent.com
ussd-prd-sfdcspkl.illumina.com
blog.arwinstrating.com
splunkes.illumina.com

Certificate

The complete raw certificate details for api.sequencing-design.designstudio-staging.illumina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lvsxQ+0XslyqzNfWGW/
xJyahdkBG7T1XFQY9FzJxsbQcg2/8m3Ik9XTlyspEV1MrlOWtpgXuKbi0voSPBa5
xd5zUuBocNXDiiNk7b9tdTk0GqI40gbc9Aq7mpsyaWJg+8WXKOj8gcDhn/znAsIk
/sfBKW24FzY8Ct4JFcJ+rXLaDsFqGe8805MBEYuU82Dm6R+xdXPcuFl0sKuy4YRI
Hfs7td9Jcwq1pg46gu+E+YXP+IwrRvs2SU3RCFMVyxaLmG9KHAcsqo7M7AFIXvz5
I5QlA6nKo2SO3UycWE9artOJUBG0dDupUL+O4H5m8ZDor8XpNkyPwY9lViiukeTQ
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078682125669115063075485917904115852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 19:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-10 19:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illumina Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.sequencing-design.designstudio-staging.illumina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29080139990933606732984308136276803558456981978070351282094725770123367865476514317167288387315164573325427270688579622252221647154214637259101862505902248477355281510724716134146762521517320019400520482149653653483808044135057962851091388646727351030987750288147391939149160253082822543739087859935065302588242498778755622406673146179665008841858243307264253820237279310921145403131842671690625638262285758956372961852466626290729686426409877326723913115112702569850235978894042090351673688082439905066385677386047379651360470753036890862776443304292141305087152732986775201411298046351721762755416013690270994714769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sequencing-design.designstudio-staging.illumina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2be83cb1ae87287f85647d362d54b09770f6fa52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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