fr-nxt.eu.jll.com

- Jones Lang LaSalle Limited -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0a:9c:a7:9f:8c:d4:e5:dc:a8:8f:2c:fa:ae:b7:3c:6c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang LaSalle Limited

Organization: Jones Lang LaSalle Limited
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:9c:a7:9f:8c:d4:e5:dc:a8:8f:2c:fa:ae:b7:3c:6c
Serial Number (int): 14105678071047520577180165141203205228
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:55:3b:31:81:03:39:cd:23:c1:a5:80:5b:c5:82:45:d8:ad:3e:5d
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): a9:62:93:ee:d3:4e:62:60:23:21:28:a9:4f:6d:0e:22:a1:8b:ed:39
Fingerprint (sha256): 06:55:c5:5b:c8:b2:1d:0d:17:f5:6a:e0:52:a8:cd:c7:71:53:94:eb:9e:46:db:e7:d7:c8:24:77:b8:32:d7:8e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate fr-nxt.eu.jll.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fr-nxt.eu.jll.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr-nxt.eu.jll.com
www.fr-nxt.eu.jll.com

Other certificates including the domain name jll.com

(limited to 100 certificates)
*.ap.jll.com
access.jll.com
www.jllproperty.com
compensationplanning.jll.com
ambitions.jll.com
sansites.jll.com
*.ap.jll.com
investor.jll.com
oneeightyst-dev.jll.com
Projectsapp.jll.com
bpm.jll.com
flexspace.jll.com
proposals.jll.com
immobilier.jll.fr
1441blake.proposals.jll.com
lyncweb-ext-01.am.jll.com
nxtinvest.eu.jll.com
perspectives.jll.com
lyncweb-ext-01.am.jll.com
www.joneslanglasalle.com
tourpointapp.jll.com
ontariosystems.proposals.jll.com
cds2.cvent.com
help.celerity-uk.com
inbom01tsbp002.ap.jll.com
cds2.cvent.com
hybridworks-qa.jll.com
www.joneslanglasalle.com
fr-nxt.eu.jll.com
capitalmarkets.jll.com
charlotteofficemove.resource.jll.com
dev-bpm.jll.com
*.jll.com
fsus-14.freshservice.com
forum.jllcab.live.jll.com
capitalmarkets.jll.com
webmail.am.joneslanglasalle.com
ask.jll.com
propertytemplate.proposals.jll.com
MapIT.EU.JLL.COM
immobilier.jll.lu
cds2.cvent.com
jllapple.live.jll.com
www.arpm.conference.jll.com
lilexpc02.am.jll.com
*.ap.jll.com
fsus-14.freshservice.com
www.thefoundry.proposals.jll.com
globalsustainability.conference.jll.com
cds2.cvent.com
webmail.am.joneslanglasalle.com
hiddengem.conference.jll.com
rmr.proposals.jll.com
shelbournecleveland.proposals.jll.com
www.joneslanglasalle.com
red-preprod.jll.com
authn.jll.com
brandhub.jll.com
*.ap.jll.com
8995airportroad.resource.jll.com
jll-sbx-okta.jll.com
jvdriver.resource.jll.com
tours.prd.propertycapsule.com
clientview-dev.jll.com
my-world.eu.jll.com
www.openavm.com
oneeightyst-dev.jll.com
bpm.jll.com
extapps.jll.com
slotdemo.proposals.jll.com
ambitions.jll.com
hiddengem.conference.jll.com
fed.jll.com
dev-bpm.jll.com
azdeptestprod.jll.com
*.ap.jll.com
lyncpool01.am.jll.com
jll.com.sg
nxtretail.eu.jll.com
authn.jll.com
fsus-14.freshservice.com
red-preprod.jll.com
nxtretail.eu.jll.com
webmail.eu.joneslanglasalle.com
fed.jll.com
*.ap.jll.com
immobilier.jll.fr
vdcexpe01.am.jll.com
capitalmarket-dev.jll.com
www.jllproperty.com
owamail.am.jll.com
clientview-dev.jll.com
sansites5.jll.com
sts.am.jll.com
multifamilyeastcoast.conference.jll.com
www.openavm.com
fsus-14.freshservice.com
jll.com.sg
medline.proposals.jll.com
commuter.eu.jll.com

Certificate

The complete raw certificate details for fr-nxt.eu.jll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QXmRElMGsnfCI5BhaMk
iX1WJtbuxwXmyy1YCecJwiRRJDEA0yzqHPqw528amqT7PEQwKcruapx2THgSYazU
XWmkurmGwyT5xFQsHOTsvqMpLh4vd6DBXmNcPIZ1AsGJGvfjVTAbtuyJwMFA+n5J
4/qdM5KPPCjd+hDgvh5ulkPQ+z90ifk7hf/JVUT0WE+a1IEciM28iiOKvYkkENzI
O/YoTKBYuDbyWLK+ZrqizpHLyfCkBt/uf2dt9TvBdAjaexXqFjlfnk7Wlah5UYod
8ewl9QyPLIzH2unGWB7f7tFZ18LjRH4LJMW+wge+52/y6xAYQsYY2zykMzBDw2tz
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14105678071047520577180165141203205228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr-nxt.eu.jll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27901574539249091840107444557381823771180684984281279033326301069998870988265940818423206107140767645558859124816016537546145430333428236675902345151685240907623666760920978472241026275377821662846980181985058958450737003279556496847672643410503562451752939434437394908692088898952762170572463249013120182846314635848124177076585407123116205952484835777185156838588097221240184143784848284382655233712858655797430873496638594647600036015279229203941246748885129247590611779499900254430743015411661370194268206916109853010492527898233679248602445725377903687199766544472767930340174101245196827609475285512295751054209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7553b31810339cd23c1a5805bc58245d8ad3e5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-nxt.eu.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr-nxt.eu.jll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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