*.bajajfinservsecurities.in

- Bajaj Financial Securities Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:fa:b1:2b:f8:d6:86:68:3f:59:12:c1:22:8a:59:ce was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bajaj Financial Securities Limited

Organization: Bajaj Financial Securities Limited
State / Province: Maharashtra
Locality: Pune
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:fa:b1:2b:f8:d6:86:68:3f:59:12:c1:22:8a:59:ce
Serial Number (int): 18581631630160074995139567255236008398
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 40:3c:18:ea:78:6c:81:fb:98:43:51:37:38:6f:44:1d:43:13:7e:db
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 48:07:39:bc:72:79:c5:0c:67:9f:58:31:d3:c4:85:9c:fe:21:21:6a
Fingerprint (sha256): 06:1f:4d:52:b4:2a:4e:c6:a1:d9:4a:ea:9b:35:38:04:25:63:9d:32:29:2b:3b:df:ae:1f:ec:7d:53:4b:2d:80

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.bajajfinservsecurities.in

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bajajfinservsecurities.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bajajfinservsecurities.in
bajajfinservsecurities.in

Other certificates including the domain name bajajfinservsecurities.in

(limited to 100 certificates)
*.bajajfinservsecurities.in
cryptocolla.com
www.deeptechsolution.top
thinktalent.lernit.app
coffee.kiedrowski.ca
trendyapps.de
blog.dyly.life
searchcode.cloud
does-it-swing.com
app.epiito.com
lavchat-user.lavenirapps.co
guardiansscratch.sqwadhq.com
*.bajajfinservsecurities.in
zipp.mx
uqfintech.org
dlinkmsil-cug.bajajfinservsecurities.in
app.babybezoek.be
nexion.dev
merry.in
akreditace.ticketspot.cz
synther.net
mta-sts.stacyhome.com
demo.manager.leasera.com
suziephan.com
*.bajajfinservsecurities.in
www.bonemeal.app
sunandsnow-stage.mysmarthotel.com
*.bajajfinservsecurities.in
portal.foundrydigital.com
olevsky.me
staging.murajuku.jp
xpinpoint.com
midnightmerchant.one
www.ar-tech.com.co
besni.zeplinx.com
*.bajajfinservsecurities.in
yakshatantra.com
link.hs2t.com
sni.cloudflaressl.com
handd-album.re2fe.com
brmill.com.br
postsign.bqd.us
zephr-paywall.kodus.dk
dlinkmsil-prod.bajajfinservsecurities.in
huaxiaschool.org.uk
processor.myya.com
stage.veertly.com
*.bajajfinservsecurities.in
accounts.dev.novafutur.com
app.teamflow.com

Certificate

The complete raw certificate details for *.bajajfinservsecurities.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqqdfe0sWuYxDeawWevH
Jc0xIEfokIUec4M/BOXOvfTg9kG7dql+F/8N9X8wsTkIONZde7WFMKgXUpQvlgOk
q1bxYUUXHYlrqB3PmSoGOaywu8q9VjrnOobnYnpTXiyx+JnLF7V2vegF42vUonnD
FF/K1Tt7tlt4eHvhUdaSMvxnPqWPcR7rxjPDQ/cstv+bvo59TCfljs5llQzREF2d
Lf6NOgJMGUNwCQRzWRV1dpMvBFELiJ6yOgdRMYubpH/GvOz7bBWNlbwV/d+vHokk
xNnEfxEMW6jUHwxDj/qm1QGuu7eTKjurRVSHI+2Oda6rANCTgaI8isL+28xHrGE3
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18581631630160074995139567255236008398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pune'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bajaj Financial Securities Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bajajfinservsecurities.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24574364655582324976918026146233970309091147417008719414798779364226669997701064942316083418027072402796758589588401355241069919531992203161268819994642642142195594326106891799458504301102336441072592457211719584131714220762540124905809280091556456054557607540207524395047733045785035516047198400122710186184900473647589328292370661937766285492341251976805121244968782212609416779878536133967413592695466599648874138011158716370946654773018362320850707263518866255069135530984418681117531772005397242351329188778780955188864337937570953996748890592815650896246986589827169640078277376128362003858957044443882759206769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							403c18ea786c81fb98435137386f441d43137edb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajajfinservsecurities.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajajfinservsecurities.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001826c51d66400000403004730450221009e6110547bc4c3f022d38628299ba92e39e6a6c27bff37a17ae0973bb9f2d71302207260c417e837ca2cda3fdbe02a6a50e17755e274aedbcb218bab17e5ea4fc0e900750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001826c51d675000004030046304402200d5fe593dd229631357c9f19556f13bbe185b71e9f7809f424eb49abf21ffe19022047b9ced7e8d24734b2f0e18823fc4167d831c250c3be7f35c40fea6857c94a9e007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001826c51d6ad000004030046304402205866311be2b1d6ed728f4f2ced2d7a5c8fd8b0c4fc1c2904d12ee9e648f05fec022047c0899f899aba46e05fda15ed2f6537ccd82919431c404194f1be1e681eaa67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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