services.softwaresupport.aveva.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:f2:49:53:d5:33:df:f3:6b:88:62:36:3a:99:16:57 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=services.softwaresupport.aveva.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f2:49:53:d5:33:df:f3:6b:88:62:36:3a:99:16:57
Serial Number (int): 21196443034360741522322341141902071383
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:84:83:df:8c:06:a5:81:3f:ee:22:89:fc:c4:46:a9:21:98:bc:dd
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 96:d8:70:f5:a8:04:d0:7e:e1:eb:35:64:3d:67:0e:f9:c2:f1:8b:53
Fingerprint (sha256): 06:54:38:6e:5c:37:bf:8f:4f:2a:9b:28:4a:4a:1b:09:4f:4c:bb:82:c4:05:75:02:c9:c8:9f:ea:ec:d0:39:94

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate services.softwaresupport.aveva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for services.softwaresupport.aveva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services.softwaresupport.aveva.com

Other certificates including the domain name aveva.com

(limited to 100 certificates)
dev4.dashboard.dev-av.dev-connect.aveva.com
cdojam.import.dev-av.capdev-connect.aveva.com
aimprim.import.preprod-av.connect.aveva.com
ots.int-cep.connect.aveva.com
sjvcvxtr.alb.tr-av.connect.aveva.com
dev2.import.dev-av.capdev-connect.aveva.com
portal.services.test-connect.aveva.com
testrc.import.dev-av.dev-connect.aveva.com
techsale3.alb.demo-av.connect.aveva.com
internal.integrationstudio.capdev-connect.aveva.com
dev2.import.dev-av.dev-connect.aveva.com
mahtest.import.dev-av.capdev-connect.aveva.com
management.test-experience.test-connect.aveva.com
aimsec.api.report.preprod-av.connect.aveva.com
test.tpskc.r53.aveva.com
91287234589239034672357235790.dev-dbc.capdev-connect.aveva.com
demo.dev-connect.aveva.com
tpsknowledgecentre.aveva.com
gcsresource.AVEVA.COM
testrc.import.dev-av.capdev-connect.aveva.com
dynamicsimulation.int-cep.connect.aveva.com
appservice-sanity-vek33.dev-ue.capdev-connect.aveva.com
*.chp.capdev-connect.aveva.com
urs.aveva.com
sw.aveva.com
aav4812.dashboard.dev-av.capdev-connect.aveva.com
test-license.capdev-connect.aveva.com
ssl508503.cloudflaressl.com
dbc.connect.aveva.com
rdspre.api.import.imav.connect.aveva.com
evalema3.dashboard.salesdemo-pv.connect.aveva.com
*.statusdashboard.com
alpha-datahub-cdn.dev-datahub.capdev-connect.aveva.com
thacvxp.dashboard.preprod-av.connect.aveva.com
cdo2a.api.report.dev-av.capdev-connect.aveva.com
reporting-gateway-dpsg.sg.test-dp.aim.capdev-connect.aveva.com
dp-capability.sg.dp.aim.capdev-connect.aveva.com
sw.aveva.com
processengineering.test-connect.aveva.com
rdssh2.dashboard.imav.connect.aveva.com
gateway.aveva.com
int-datahub-pbi-cdn.int-datahub.capdev-connect.aveva.com
dev8.import.dev-av.capdev-connect.aveva.com
ssl322849.cloudflaressl.com
bukoshe.import.salesdemo-pv.connect.aveva.com
cdn.int-datahub.capdev-connect.aveva.com
identity.aveva.com
jsnaima.api.import.dev-av.capdev-connect.aveva.com
ram-api.filetransfer.dev-ue.capdev-connect.aveva.com
prev.liveview.dev-insight.capdev-connect.aveva.com
dynamicsimulation.connect.aveva.com
online.wonderware.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
democvx.elb.tr-av.connect.aveva.com
pvtemp2.api.report.dev-av.capdev-connect.aveva.com
api.3d.pt.dev-fabtrol.capdev-connect.aveva.com
testop7.api.import.dev-av.capdev-connect.aveva.com
dev21.import.dev-av.capdev-connect.aveva.com
testop9.dashboard.dev-av.capdev-connect.aveva.com
dev-systemplatform.exchange.aveva.com
help.exchange.aveva.com
help.exchange.aveva.com
laxman-laas.dev-license.capdev-connect.aveva.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
*.avs.dev-aim.test-connect.aveva.com
capdev.connect.r53.aveva.com
infra-pbi-cdn.dev-datahub.capdev-connect.aveva.com
rdspre.api.report.imav.connect.aveva.com
ingestionapi-dpdemo.demo-av.connect.aveva.com
dev13.elb.dev-av.dev-connect.aveva.com
sni.cloudflaressl.com
access02.aveva.com
result-service.test-wse.test-connect.aveva.com
alpha-pbi-cdn.dev-datahub.capdev-connect.aveva.com
testavir.api.report.dev-aim.test-connect.aveva.com
babwas.dashboard.imav.connect.aveva.com
dev14.import.dev-av.capdev-connect.aveva.com
demorc.dashboard.dev-av.dev-connect.aveva.com
*.avs.tr-av.connect.aveva.com
testdev.import.dev-av.dev-connect.aveva.com
*.preprod-avs.capdev-connect.aveva.com
cdn.datahub.connect.aveva.com
avevaworld.aveva.com
mcbucvxtr.api.report.tr-av.connect.aveva.com
sni47348.cloudflaressl.com
ceros4.map.fastly.net
perf.dashboard.dev-av.dev-connect.aveva.com
*.aveva.com
mahtest.api.import.dev-av.capdev-connect.aveva.com
*.int-cep.connect.aveva.com
portal.services.connect.aveva.com
test-datahub-pbi-cdn.datahub.test-connect.aveva.com
dev3.alb.dev-av.dev-connect.aveva.com
mfg1cvx.import.imav.connect.aveva.com
design.aveva.com
dev9.dashboard.dev-av.dev-connect.aveva.com
bukoshe.alb.salesdemo-pv.connect.aveva.com
ceros4.map.fastly.net
*.statusdashboard.com
urs.aveva.com

Certificate

The complete raw certificate details for services.softwaresupport.aveva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvbTk0z6vrb4P/wz1icW
SA8JdsMGPY2V1Y7uEUN6uiBdP+DRlhyikPfFQJBlEJFKtUnhxUS0iJdgljQ/QJIw
oLE0pjENv4DJ5861as9E7e5IcsC7LQv3PO1Gkc7W0emNCNur3cmEJ+hFgID7eUPE
kUjhem5syIMo2ThoLQPmsqauH4BNySSp3RdBBagUzgADTBFRZGNQk8utKaKYF9cd
/D3mKYriiA6BxprPQYVqNwczv/DOJkiN5YQYjy+FP4IkGQY4nz9IUXvAePqA8X9E
mHGWXMkpyLUXpFniBpHuzZcDmK1ppEvYyhrb1ofgqSuYxWiLN5wEZ1s9SVHq4i+N
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21196443034360741522322341141902071383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.softwaresupport.aveva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24106992610491037636499144097860009377631649486488557849667798238786869824602697348172265963129253218735980889351345259089905781164748689326232630931336588453971996912421861580698341918741505788011199397136615931676573420116452100869447861857860166748170827999212635361889277081000884349083956054096172434105844751727217663411393922792932809821070598554022952704333686121896590741425948258003266849376378914529586801768135495465397828118270710219949029005219768151609580343967132975527264967501096935897340384416251040922875383829563204976129788411956509647348678827460791258877151986668034349830956985576658167631209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							558483df8c06a5813fee2289fcc446a92198bcdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.softwaresupport.aveva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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