cims.so.one.un.org

- United Nations Development Program Somalia -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:23:57:e4:d4:02:32:a4:ba:6f:e2:ef:48:0d:0e:20 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Nations Development Program Somalia

Organization: United Nations Development Program Somalia
Locality: Nairobi
Country: KE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:57:e4:d4:02:32:a4:ba:6f:e2:ef:48:0d:0e:20
Serial Number (int): 4171197076673516624094604420679798304
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7f:5c:2f:2a:77:b3:97:7c:2e:c9:56:2b:75:df:36:a8:21:96:d5:b2
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 18:0b:b5:fd:5d:2c:a6:97:6a:7c:42:f8:d8:ad:f4:e6:62:ad:ea:92
Fingerprint (sha256): 05:26:1a:19:91:af:60:b2:ff:8d:e7:3e:55:fa:9c:f5:4f:27:14:7f:c2:c1:2d:16:e6:ba:1e:d7:18:b7:f6:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate cims.so.one.un.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cims.so.one.un.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cims.so.one.un.org
cims.ss.one.un.org
cims.af.one.un.org
cirt.so.one.un.org
cims.ly.one.un.org
rmu-training.so.one.un.org
rmu.so.one.un.org

Other certificates including the domain name un.org

(limited to 100 certificates)
*.un.org
*.un.org
lpk-cms.ilearn.un.org
kh.one.un.org
lpk-cms.ilearn.un.org
*.wf.un.org
cims-test.so.one.un.org
5726971199750144-fe1.pantheonsite.io
ilearn-cms.umoja.un.org
cerf.un.org
5679778661138432-fe3.pantheonsite.io
un.org
ask.un.org
jo.one.un.org
un.org
dprkorea.un.org
afghanistan.un.org
untermportal.un.org
mw.one.un.org
bkkuccx02.escap.un.org
ask.un.org
ask.un.org
*.qa.un.org
syria.un.org
5673073118281728-fe4.pantheonsite.io
hcc-hpsb-training.ilearn.un.org
*.news.un.org
elearning-cms.unstats.un.org
5684961520648192-fe4.pantheonsite.io
ci.one.un.org
*.escap.un.org
sdgprimer.un.org
expccl.ptc.un.org
elearning-cms.unstats.un.org
inspira.un.org
learning.un.org
5726971199750144-fe1.pantheonsite.io
ss.one.un.org
ask.un.org
cims.so.one.un.org
conf.un.org
kh.one.un.org
*.dss.un.org
papuanewguinea.un.org
migrationnetwork.un.org
ungsc-remotesupport.un.org
inspira.un.org
un.org
elearning.un.org
india.un.org
unp.un.org
5673073118281728-fe4.pantheonsite.io
*.dfs.un.org
uniteaware.un.org
peru.un.org
www.tm.one.un.org
lyncsip.dfs.un.org
roadsafetyfund.un.org
research.un.org
lpk.ilearn.un.org
ilearn-cms.umoja.un.org
ilearn.un.org
zm.one.un.org
research.un.org
expecl.video.un.org
mail.stc.un.org
apidocs.cna.com
*.unite.un.org
enterpriseenrollment.dfs.un.org
un-az.org
shop.un.org
countryteam.org
officewebapp.dfs.un.org
5673073118281728-fe4.pantheonsite.io
cims.so.one.un.org
roadsafetyfund.un.org
hcc-cms.ilearn.un.org
digitallibrary.in.one.un.org
journal.qa.un.org
morocco.un.org
crmlearning.un.org
crmlearning-cms.un.org
*.umoja.un.org
cims.so.one.un.org
af.one.un.org
cameroon.un.org
*.dfs.un.org
service.ilearn.un.org
fdp.un.org
remote.dfs.un.org
hcc-cms.ilearn.un.org
remote.dfs.un.org
lpk-cms.ilearn.un.org
cm.one.un.org
hcc-hpsb-training.ilearn.un.org
cd.one.un.org
mm.one.un.org
vdi.dfs.un.org
www.un.or.th
ci.one.un.org

Certificate

The complete raw certificate details for cims.so.one.un.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4171197076673516624094604420679798304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nairobi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Nations Development Program Somalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cims.so.one.un.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761274738766948906392706866521501587419326603743538301070458473932222307668794202142387980573116885301921408748629875907600941480295547139046214163878340558753078577949125475111770249138013357488861386266618382973854157811455836448334103040161428291399013478228689457793373407054175338879771934046820911530375696783246010294616616385815229856527349720751704682814028233219169750632861405300706310261304287517313840902023014648317434961485965035667615623552091445756836461666422394760543003235467913059007656969090448459249347121663068644293250919650046796138233272590320453516952098963923347408310369858434492134723392350971446501756342498159170513993413678084160007533182429903845033396321549767812393392064623301776020562101222681999863826345181823323616165659786939123519636461492523204741244909566618052273734765991850607038681181315132717824833225615952713177616722144629911084895185511555647959885377128884534159436555865620393518176678163271508601350455950751446878058866505751128483364689770891443008356213301793684044118931076727245516478288759310505414905829344880370872316733539968283606805730414507588692057013221352234619757833267741581763282531610634103166265230251067577004198585858097413218768050083089119687198820317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f5c2f2a77b3977c2ec9562b75df36a82196d5b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cims.so.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cims.ss.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cims.af.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirt.so.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cims.ly.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmu-training.so.one.un.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmu.so.one.un.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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