controlmdev.illumina.com

- Illumina Inc -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:8e:c0:a1:d3:1e:e5:4f:ab:1a:10:44:2a:b9:94 was issued on by IdenTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Illumina Inc

Organization: Illumina Inc
State / Province: California
Locality: San Diego
Country: US

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:01:8e:c0:a1:d3:1e:e5:4f:ab:1a:10:44:2a:b9:94
Serial Number (int): 85078679391146387799640033420968114580
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:b0:11:31:84:75:ce:55:4c:b5:56:8b:0e:fb:66:fc:57:70:03:f7
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): c7:81:e0:2c:ec:c8:78:52:49:81:ba:07:4e:95:d0:40:d9:a3:1e:dc
Fingerprint (sha256): 04:2a:06:7b:e2:c0:ba:c7:cd:36:8f:31:6c:d0:c2:85:3c:c5:b3:9a:09:2e:6b:67:59:c6:a2:04:df:b3:dd:ee

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate controlmdev.illumina.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for controlmdev.illumina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

controlmdev.illumina.com
ussd-dev-ctlm11.illumina.com
ussd-dev-ctlm12.illumina.com
ussd-dev-ctlm15.illumina.com

Other certificates including the domain name illumina.com

(limited to 100 certificates)
secure07.stage.lithium.com
ussd-prd-arcp01.illumina.com
ussd-sbx-zpac06.illumina.com
sapgtsprd.illumina.com
lims-rc.illumina.com
dev.rancherpd.illumina.com
dev-prdt.illumina.com
ipp-dev.illumina.com
sgnt-dev-zpac04.illumina.com
lab.adamshealthnetwork.org
instrument-scheduler.ils.illumina.com
sapmiidev.illumina.com
tableausbx.illumina.com
adm-fab-san-prd.illumina.com
prdt.illumina.com
devchat-bluejeans-service.aws-prod.illumina.com
incapsula.com
vault.oad.illumina.com
cpc-jenkins.ep-np.illumina.com
incapsula.com
cds1.cvent.com
grr.illumina.com
ussd-prd-dswb03.illumina.com
gokpi.illumina.com
eventregistration.illumina.com
tst2.etpsolr.illumina.com
*.subscription.illumina.com
supportassets.illumina.com
ontology.testing-domain.illumina.com
*.iron-tst.illumina.com
rancher-vye.aws-dev.illumina.com
UKCH-PRD-SNMD02.illumina.com
*.cloud-test.illumina.com
sso.login.illumina.com
www.alexhang.com
cds1.cvent.com
www.illumina.com
api.sequencing-design.designstudio-staging.illumina.com
tierboard-dev.illumina.com
wgs-preprod.illumina.com
controlmdev.illumina.com
*.docker.illumina.com
cds1.cvent.com
api-tst.add.illumina.com
expwy.apac.illumina.com
components.illumina.com
use1.deso-prod.cpo.illumina.com
www.providerportal.ils.illumina.com
othrys.olympia.k8s.backend-dev-aws.illumina.com
software.radiance-design.illumina.com
finvivirstatus.mambu.com
secure07.stage.lithium.com
tls.automattic.com
*.cloud-test.illumina.com
ipp.illumina.com
softwaredownloads.illumina.com
ussd-dev-zpac04.illumina.com
ussd-ftp.illumina.com
company.ensvee.com
ussd-dev-smap01.illumina.com
ussd-tst-etpw01.illumina.com
ussd-prd-hpad03.illumina.com
vaultdev.illumina.com
ashg2020.illumina.com
*.basespace.illumina.com
*.rancher-dev.illumina.com
cds1.cvent.com
inotifications-dev.illumina.com
sapeccprd.illumina.com
finvivirstatus.mambu.com
hub-dev.illumina.com
solr-ldap-service.illumina.com
login.illumina.com
incapsula.com
usma-prd-rdgw01.illumina.com
cds1.cvent.com
blog.infra.illumina.com
rancher-thtf.aws-dev.illumina.com
*.cloud-naboo.illumina.com
myaccess-sbx.illumina.com
secure07.stage.lithium.com
ussd-prd-clms02.illumina.com
platform.illumina.com
rancher-test.aws-prod.illumina.com
ukga-prd-hpov03.illumina.com
esb13-n1.illumina.com
incapsula.com
secure07.stage.lithium.com
finvivirstatus.mambu.com
*.testing-domain.illumina.com
*.ca.basespace.illumina.com
*.oad-aws.illumina.com
ussd-prd-snmd04.illumina.com
ussd-prd-okta01.illumina.com
secure07.stage.lithium.com
delivery-api-bssh.ils.illumina.com
cds1.cvent.com
ussd-prd-sfdcspkl.illumina.com
blog.arwinstrating.com
splunkes.illumina.com

Certificate

The complete raw certificate details for controlmdev.illumina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FmqkQFol2D4QxVtpW6
fvonaC0D4mzpUl+XVS1vKhWOGAl78CrUszqZjScILnAZx+z6YrpEd4lcXPzSt/9h
fgsFRAfC0yehe7Zo6NToPTu/0IlUm5qhY//48qYHX02+eKGpDc4BiVpLmeMD1UE5
8xuo7Mjdy8C7Kpm9GWoh757NI6LBlMrfvO4FP1asnwdxWD8G0qXIPGLNPahASqQ3
la4uVXt5Rfprpk4Dm4DuTnWJsBD5ogj7RRGqdMeTnOc9JQzp6KCIQcgGhKiJlxFO
p6liNsQuDwt51Czfh2XXJMvRmrjfJJMbY35iNb85UeXD1XH3vB2ySx0UAvVEsXm9
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078679391146387799640033420968114580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 02:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-04 02:12:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illumina Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'controlmdev.illumina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23133860261408556801970997917230398650959391235115300955640689130230850090892755202018597038011843269961765252076657126984842539670480778303945242958245743395031612080922311558036213848662302131083237988983646908890331218988536729182957806741981244756944367197266670112123748285839235173035437754343816210028229224546905256105217589871331847821355144398970150948644992725117065522149037720097486304050215806797907975595415046599853628878491064784309704895227627806176822788914045134153386557888474506529234134875065058311397747478741180620375864150592657134451636514749441369796775329037403803250645061955272868216137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlmdev.illumina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussd-dev-ctlm11.illumina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussd-dev-ctlm12.illumina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussd-dev-ctlm15.illumina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3b011318475ce554cb5568b0efb66fc577003f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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