api-qa1.cloud.synopsys.com

- Synopsys, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2e:2a:ae:28:56:79:c0:57:80:5d:80:1d:78:2e:eb:bd was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Synopsys, Inc.

Organization: Synopsys, Inc.
State / Province: California
Locality: Mountain View
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:2a:ae:28:56:79:c0:57:80:5d:80:1d:78:2e:eb:bd
Serial Number (int): 61366096609325028052490857681035127741
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b1:25:0a:6b:0b:f3:af:35:e9:54:6a:d2:b8:82:1d:1e:e9:1f:03:0a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8b:7f:dc:a4:c3:91:ed:9a:e9:9e:41:2d:f6:b9:40:50:1a:86:55:40
Fingerprint (sha256): 07:20:d4:32:f2:1e:83:e4:a4:3c:0b:87:c3:33:b4:e6:63:94:5d:6f:24:7a:4d:9f:e3:91:d1:0a:eb:73:1d:5f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate api-qa1.cloud.synopsys.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-qa1.cloud.synopsys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-qa1.cloud.synopsys.com

Other certificates including the domain name synopsys.com

(limited to 100 certificates)
gitsnps.internal.synopsys.com
mdc-scs2.synopsys.com
cn.news.synopsys.com
polaris.synopsys.com
capco-status.polaris.synopsys.com
c53.status.diamondasaservice.com
mdc-ssl-gwy.synopsys.com
sca.synopsys.com
alerts.funda.nl
cyberarkepm.aws.synopsys.com
misc.synopsys.com
gettimely-status.polaris.synopsys.com
endpoint-security.status.broadcom.com
o365relay-out.synopsys.com
herbalife.status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
securitylearning.synopsys.com
nessus.synopsys.com
sig-confluence-test.internal.synopsys.com
scsvuc5.synopsys.com
smetrics.synopsys.com
jp01-vpn.synopsys.com
scsvuc2.synopsys.com
salesloft.synopsys.com
evalportalqa.synopsys.com
herbalife.status.polaris.synopsys.com
us02vwdosgsp.synopsys.com
scs5-admin.synopsys.com
anjuna.status.polaris.synopsys.com
in19cppm01.internal.synopsys.com
alerts.funda.nl
itsstatus.unc.edu
anjuna.status.polaris.synopsys.com
customer.synopsys.com
bizagi.status.polaris.synopsys.com
cn30-vpn.synopsys.com
cn08-scs1-admin.synopsys.com
indigo.training.synopsys.com
password.synopsys.com
api-qa1.cloud.synopsys.com
stg-dbt-docs.sigdatainsights.cloudops.synopsys.com
indc-vpn.synopsys.com
clarks.status.polaris.synopsys.com
snpsdaeu.synopsys.com
c53.status.diamondasaservice.com
scs6.synopsys.com
am04-vpn.synopsys.com
scsvuc8.synopsys.com
c53.status.diamondasaservice.com
polaris.synopsys.com
automationhero.status.polaris.synopsys.com
c53.status.diamondasaservice.com
azfra1status.mambu.com
connect.synopsys.com
storage-cov-us.altair.synopsys.com
us01-vpn.synopsys.com
apistatus.returnpath.com
training.synopsys.com
qa.csod.synopsys.com
cn42cppm01.internal.synopsys.com
scs3.synopsys.com
api-status.360cities.net
anjuna.status.polaris.synopsys.com
alerts.funda.nl
*.synopsys.com
eventreg.synopsys.com
bizagi.status.polaris.synopsys.com
endpoint-security.status.broadcom.com
crk.status.cloudsigma.com
cl01-vpn.synopsys.com
sdc-aws.synopsys.com
solvnet.synopsys.com
reporting.synopsys.com
alerts.funda.nl
anjuna.status.polaris.synopsys.com
alerts.funda.nl
keyfactorpki.synopsys.com
*.synopsys.com
usocsr2dirpool.internal.synopsys.com
*.msp.synopsys.com
lplfinancial-status.polaris.synopsys.com
blogs.synopsys.com
herbalife.status.polaris.synopsys.com
blogs.synopsys.com
scsvuc3.synopsys.com
us01cppm03.internal.synopsys.com
dam-stage.author.synopsys.com
chat.synopsys.com
alerts.funda.nl
adtrust.wellsky.com
carlzeiss-status.polaris.synopsys.com
appspider.synopsys.com
capco-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
cn.news.synopsys.com
carrier-status.polaris.synopsys.com
coresvc.synopsys.com
atlanticindustrie-status.polaris.synopsys.com
jp01-vpn.synopsys.com
*.polaris.synopsys.com

Certificate

The complete raw certificate details for api-qa1.cloud.synopsys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2d1MDFq0AFlpE7NvtTa
k+mu9cdOw+q3o3lCmMjso9/TGI3gddwxy3+RhupEdPm8aLDsfkcjGhEVDUC3F64Y
q5Dl6S5s31iHkgIa23G8AEHwD94Ox5bGFwu8qXXKZfSYFsW3dDiEvNWhxTL00kPq
JRqaguGfopGBjSeP8Ho9bXIdD2WgMmtzVRWryybzgCHpwUuCClBQq3uQsR7k/MAW
igQTaPABZTuXaTcbiVxDdL0++ErpDTo+vNvLZ1YyJn20A45zViQd029gnRFwj+tR
fyMuOwMN8Er4vslEEfpRShTVMh/asOwD9v77R0mPtd0CR9nDMLwjaocP8jUFBfEO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61366096609325028052490857681035127741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 14:53:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 14:53:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Synopsys, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-qa1.cloud.synopsys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23152626734934630622145615407643384375924245425380715856363084251802695268438954250519666349383874397933177077148865114948199777498498962066470935782523533670340072227241519113186668798206148671206516796704492522314151468975722128482813111782479702975715304316967872929224132089379706670893507492311231034735328576471305155998638012532437863711644356338188258345145846602600535292023260403747697024605672538298492505890363095818757178637756928956944972769735917618210129393312591137773878345919563172775608576351447311372464081725295885583908118024864246594221440787751398818918962897902912937807157334951727427817161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1250a6b0bf3af35e9546ad2b8821d1ee91f030a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa1.cloud.synopsys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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