dev-portal-nrosh.softwire.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:59:75:1d:44:9b:b5:ad:29:18:e1:77:98:e8:d3:12 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-portal-nrosh.softwire.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:59:75:1d:44:9b:b5:ad:29:18:e1:77:98:e8:d3:12
Serial Number (int): 9769085751677573040844476648117555986
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:b2:9d:14:58:bc:75:b2:ea:ee:9a:db:fa:0c:5d:02:ea:a9:2b:98
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 5a:b1:74:a0:30:11:f8:81:52:04:43:2f:ab:1b:37:e7:bf:b5:43:9a
Fingerprint (sha256): 06:e9:f8:0d:65:4b:95:85:0f:a6:06:3f:7a:ea:9b:a1:2a:31:8b:9f:01:65:11:7a:a4:d5:dd:44:d1:d0:98:39

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev-portal-nrosh.softwire.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-portal-nrosh.softwire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-portal-nrosh.softwire.com

Other certificates including the domain name softwire.com

(limited to 100 certificates)
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
theenglish.m1studio.co
sni176918.cloudflaressl.com
*.softwire.com
mail.softwire.com
bennettl.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
kar-certificate.thinktac.com
www.yuli.cl
on-life.jp
dev-portal-nrosh.softwire.com
sni176918.cloudflaressl.com
softwire.com
sni176918.cloudflaressl.com
imaginative.shoesprays.com
sni176918.cloudflaressl.com
lifebyvivara.com.br
sni176918.cloudflaressl.com
www.define.ag
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
brunaturmfcapital.wl.titanbay.com
sni176918.cloudflaressl.com
joytasker.com
sni176918.cloudflaressl.com
mc34.xtend.events
www.ora-source.com
sni176918.cloudflaressl.com
brooks-admin.petlicense.online
harascorp.com
email.softwire.com
link.championsmind.app
*.softwire.com
gefeststroi.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pathtech.org
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
i-trade.app
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.andosando.xyz
blog.fm7077.it
essencebo.com
sni176918.cloudflaressl.com
kylanlewis.page
sni176918.cloudflaressl.com
*.softwire.com
intivastudio.com
get.maxxer.com
sni.cloudflaressl.com
access.softwire.com
sni176918.cloudflaressl.com
parkerlocks.in
test.hottruck.com
pinkdhaga.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni.cloudflaressl.com
sni176918.cloudflaressl.com
staging.nuclei.app
sni176918.cloudflaressl.com
covid.noralavonne.com
lcsp.sheriffsalerts.com
zmh.business
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
eliezerbarbosa.com
sni176918.cloudflaressl.com
toastty.app
sni176918.cloudflaressl.com
internal.12traits.com
admin.aplicativoboletim.com.br
sni176918.cloudflaressl.com
imedis.io
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
www.bigscreen.world
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
yonjins.com
bifrost.atyrpharma.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
pets-are-everything.com
sni176918.cloudflaressl.com
academy.softwire.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com
sni176918.cloudflaressl.com

Certificate

The complete raw certificate details for dev-portal-nrosh.softwire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uRFm6oW6AeNTQZxOqQw
bSgZ2Su19WIX+qjhL+j8tQ1/UsdK/a23UDS4ybx6al6/VUgZCMmExXwETtGCtPEV
X0MTGCjKKo3rLwzfaGed8MUSMWBAqz5DWad1JJmCn1L9wXWd1LzO09WHAD3vNYXt
hY6MTfNyGY2pH8if9CoGySM5DqP7IwnAcjY2oaMtq+TrDLwYyCEN1yU83c+nvmWF
LQNAC5gW/CZNU4v3LcCCvNuWvcv3c1neFA99xi8VSssSwC5tsh8c7bg4bD1gKXoZ
9NSYZHWpjAw3mNZ42w/Oisv1sm7KAaCjlg0bg/83mmf5Ow/ybg9TZKjEuOO4dkzY
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9769085751677573040844476648117555986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-portal-nrosh.softwire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31167188094103485919373210397498579788096809746341862805292678993517377411077599099532784359174549904149167482946277869976911972945628997764648802933434253996753584222208354648320090480320886258796871324115641166712141067396008687346823699555970817049847396383540691637428764256312284859235070354002212668789224667456451362132112921626364515330173787763430119174668377874207225648629563663634869820931861215068489108783710650093606072447089784681757947897433827966534966083158338528310584397154492304601974187864311972601141897781458699645106082715475371103142814494889675146292324819535904356403489391020142108661837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72b29d1458bc75b2eaee9adbfa0c5d02eaa92b98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal-nrosh.softwire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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