uat.valueplus.saint-gobain.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:2e:1f:39:cb:fd:5e:47:74:fd:35:ae:a9:cd:19:09 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uat.valueplus.saint-gobain.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:2e:1f:39:cb:fd:5e:47:74:fd:35:ae:a9:cd:19:09
Serial Number (int): 13531758947176497761494580844898883849
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:6c:43:95:6a:3b:a5:83:36:94:ca:45:71:95:47:a9:7a:59:3c:d7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 72:cf:fa:2d:f1:03:87:32:21:03:2e:e4:54:7d:a7:a9:17:94:d0:34
Fingerprint (sha256): 05:a2:50:50:6d:bd:9a:2b:86:f3:b5:65:3d:28:2e:8c:91:be:8a:b9:98:e1:8a:36:87:0e:24:6a:fb:7d:ef:da

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate uat.valueplus.saint-gobain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.valueplus.saint-gobain.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.valueplus.saint-gobain.com

Other certificates including the domain name saint-gobain.com

(limited to 100 certificates)
imperva.com
mobilemail2.saint-gobain.com
imperva.com
www.chartercampaign.saint-gobain.com
*.extranet.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.saint-gobain.com
www.saint-gobain.com.tr
pprugmobileservice.saint-gobain.com
bimlibrary.saint-gobain.com
www2.plastics.saint-gobain.com
imperva.com
design-challenge.saint-gobain.com
ppmobilemail.saint-gobain.com
boost.glass.saint-gobain.com
multimedia.newsletter-im.saint-gobain.com
incapsula.com
store.processsystems.saint-gobain.com
*.website4sg.saint-gobain.com
mail5.saint-gobain.com
gec.saint-gobain.com
bimauthorization.saint-gobain.com
surveys.saint-gobain.com
www.blackpool-powertools.co.uk
incapsula.com
customersmdm-ceramics-int.saint-gobain.com
employee.saint-gobain.com
prosource.app.saint-gobain.com
uat.valueplus.saint-gobain.com
imdf-userguide.im.saint-gobain.com
securelogin.saint-gobain.com
*.fts.saint-gobain.com
www.saint-gobain.fr
www.repairservices.sefpro.com
pprugmobileapps.saint-gobain.com
incapsula.com
boost.sekurit.saint-gobain.com
www.saint-gobain.com
fr-partners.ras.saint-gobain.com
www.bearings.saint-gobain.com
valmobilemailpki.saint-gobain.com
valrugmobileapps.saint-gobain.com
mobilemail2.saint-gobain.com
www.refractories.saint-gobain.com
partners.weber.saint-gobain.com
www.bearings.saint-gobain.com
imperva.com
exch.saint-gobain.com
business-challenge-2018.saint-gobain.com
imperva.com
valrugmobileapps.saint-gobain.com
api.o365guestaccessreview.saint-gobain.com
midco.saint-gobain.com
sip.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
sga-userguide.im.saint-gobain.com
mail6.saint-gobain.com
catalog.biopharm.saint-gobain.com
store.saint-gobain.com
api.cockpit.saint-gobain.com
uat.cloudgateway.saint-gobain.com
videos.saint-gobain.com
customer-eu.lifesciences.saint-gobain.com
store.processsystems.saint-gobain.com
imperva.com
mail10.saint-gobain.com
benelux-register.saint-gobain.com
go.nordic.saint-gobain.com
mdm-uatsupplier.im.saint-gobain.com
*.fts.saint-gobain.com
catalog.biopharm.saint-gobain.com
*.im.saint-gobain.com
webmail.saint-gobain.com
giws.saint-gobain.com
www2.plastics.saint-gobain.com
*.notilus.saint-gobain.com
surveys.saint-gobain.com
www.saint-gobain.com
valmobilemail.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.bearings.saint-gobain.com
mdm.saint-gobain.com
www.saint-gobain.com
partners.weber.saint-gobain.com
colibri.saint-gobain.com
www.bearings.saint-gobain.com
peg.saint-gobain.com
bimlibrary.saint-gobain.com
easyload.isogypfr.saint-gobain.com
imperva.com
bimlibrary.saint-gobain.com
www.saint-gobain.com.tr
www.blackpool-powertools.co.uk
flyover2019.saint-gobain.com
guest.saint-gobain.com
*.saint-gobain.com
marketing-development.saint-gobain.com

Certificate

The complete raw certificate details for uat.valueplus.saint-gobain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzFenSXccTyMKbQNJ60R
dwpBKiN08nRnPi+qzW8PvXowFR9gXp5Vic1tPGm064fh3hQwDr81RQySf04CLkhK
oH1c/pogOjD2HveqJGfOp4gUGQJETKXFL36b5/xffPP/mWjdsqd5biI9+QphqIVl
2q9yM6ljDsh01P9XF57kQUquV2nHfFP4mUVWuY/Jwm2oNaGPCbb4VDaSnQgrl3PZ
Zz3NSG9vYJti/f+4UTDvfULzDVLWxHD1I+JrhBT95PywLFhDWDjEjEKfEPOBE9Dj
DLoUEHQYeB/ORVvUVvRifiQG+8kozJ3QgisxsVE0KUG2hti9YNVsOjiHu3fHCXwH
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13531758947176497761494580844898883849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.valueplus.saint-gobain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23125954858695286498343071037424410923989395803547034364089439589021061465510352781013512560410694948794944921575641339335335610039649178621700100482765040093457096108428242605895191886357779633220342177922098028329006017814967070318156046576716116769166606256594199186410478671723959637552278791770735247512410940003219988828265755278795768319461117320147273484880772298531495631920297546736990193771025758436972542203359052167012379264634121565371724624940711757498746377829428585198922157407735948859932658922421003362231907468019933994052746743513131393066637462715667899485907943921882836264880210521888151832337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							216c43956a3ba5833694ca45719547a97a593cd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.valueplus.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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