devpi.dsone.3ds.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number cd:d9:06:fa:b5:f1:b3:47:ba:b9:f1:03:88:4b:cd:2f was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=devpi.dsone.3ds.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): cd:d9:06:fa:b5:f1:b3:47:ba:b9:f1:03:88:4b:cd:2f
Serial Number (int): 273618609112017046543743403459787607343
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c3:11:85:c2:ca:03:5a:6e:ad:82:7c:21:71:be:c5:64:ce:2c:89:a2
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): fc:aa:84:64:c3:2d:12:87:bf:57:d7:f6:93:31:f1:6f:89:b9:a7:6e
Fingerprint (sha256): 07:d0:99:b8:35:e8:32:99:87:e0:62:0e:fb:10:3a:fe:11:8a:67:a5:83:93:2e:69:e0:c4:75:bf:d6:46:0a:f6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate devpi.dsone.3ds.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devpi.dsone.3ds.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devpi.dsone.3ds.com
www.devpi.dsone.3ds.com

Other certificates including the domain name 3ds.com

(limited to 100 certificates)
is14.extranet.3ds.com
*.connect.3ds.com
itartransfer.ag.3ds.com
env10test.ag.3ds.com
webnode01.drupal.public.qal.vpc-eu01.it3ds.com
*.3ds.com
www.quantil.com
fe-lws01.ag.3ds.com
piwik.extranet.3ds.com
connect.3ds.com
exalead-nam.ag.3ds.com
www-ppd.dsswym.3ds.com
webnode01.drupal.public.qal.vpc-eu01.it3ds.com
iaas04ap.extranet.3ds.com
emailing.3ds.com
l.laprovence.com
3dscom-ppd.itvpc.3ds.com
*.3dx-staging.3ds.com
manufacturing.register-events.3ds.com
*.3ds.com
l.laprovence.com
l.laprovence.com
*.extranet.3ds.com
int01.drupal.public.int.vpc-eu01.it3ds.com
l.laprovence.com
*.quantil.com
l.laprovence.com
www.quantil.com
ui-qal.itvpc.3ds.com
ui-qal.itvpc.3ds.com
sync.emea.3ds.com
l.laprovence.com
3dscom-ppd.itvpc.3ds.com
fe-lws01.ag.3ds.com
redirect-ppd-ssl1.itvpc.3ds.com
*.namforum.3ds.com
ag-mxg-vsp.ag.3ds.com
l.laprovence.com
org.www.dsswym.3ds.com
webnode01.drupal.public.qal.vpc-eu01.it3ds.com
l.tierce-magazine.com
ui-dev.itvpc.3ds.com
incapsula.com
lra.emea.3ds.com
env22test.ag.3ds.com
eu-dcb-isepsn01.dsone.3ds.com
redirect-prd-ssl2.itvpc.3ds.com
eu-dcb-isepsn02.dsone.3ds.com
m.swym.3ds.com
eupsftigw.3ds.com
l.tierce-magazine.com
techexperience2018.register-events.3ds.com
kidsday2018.register-events.3ds.com
devpi.dsone.3ds.com
dsappstore.3ds.com
iaas11ap.extranet.3ds.com
companion-prd.3ds.com
ap-2.wifiguest.3ds.com
env07test.ag.3ds.com
ui-dev.itvpc.3ds.com
perspectives.3ds.com
env11test.ag.3ds.com
*.3ds.com
www.quantil.com
vs-sales-convention2018.register-events.3ds.com
t.community.3ds.com
redirect-prd-ssl6.itvpc.3ds.com
redmine-mkt.itvpc.3ds.com
int01.drupal.public.int.vpc-eu01.it3ds.com
valueup2020.10-12.register-events.3ds.com
perspectives.3ds.com
companion-qals.3ds.com
env02test.ag.3ds.com
*.media.3ds.com
techexperience2019.register-events.3ds.com
forums-events.3ds.com
*.extranet.3ds.com
eupsftigw.3ds.com
dstokendsy.3ds.com
ui-dev.itvpc.3ds.com
fr.digital-transfo.3ds.com
redirect-prd-ssl5.itvpc.3ds.com
outlook.3ds.com
tracking-qal.itvpc.3ds.com
3dscom-ppd.itvpc.3ds.com
forums-events.3ds.com
presidentsclub3ds.register-events.3ds.com
en.digital-transfo.3ds.com
geovia.extranet.3ds.com
env08test.ag.3ds.com
*.iam.3dx-staging.3ds.com
redirect-prd-ssl2.itvpc.3ds.com
redmine-mkt.itvpc.3ds.com
*.itvpc.3ds.com
dsxclientpgm.ag.3ds.com
peerlearningexperience.3ds.com
webconf.ap.3ds.com
slc2019-bt.register-events.3ds.com
l.laprovence.com
env23test.ag.3ds.com

Certificate

The complete raw certificate details for devpi.dsone.3ds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273618609112017046543743403459787607343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devpi.dsone.3ds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662608587582549590434528264754149839485535835564759840014623955654099070547400127493353076578706361116706814404563691531421649155043773904795011463609903961435022187630838509286221663061254612505996571140236589540397913444477326082577595013658029450452583486089482897544309951771063790334408926218222299032542623234303722683053745187276461993027219329635227585116742447375670771430378093117988518651318384817146001229918215627022841055997850364961581869375503614357677561680958701420525570623032314873956988442066309160248418077894750224055306475415416522154824478213490938719304559638547313327470846304017379301646781200213390730516672736627582802443976384325547463100648531964268011194966909706211196119635262658867074794191459465268477965320850334135923256664693653995174618025047525454895678619909012215840361859425269162548479799851487439314933231627474548122819720032099016869328674788547119277305553312558464432784534196791253233954260315778772934870829515028046541245429820294924131782934986866374605019740981018035686425760292331958077112253402089212728479889223272805427183009289438427728689074783441754046652083340899538148271878675455914265381030228932314645943317408170240977513868592103783860087774646838130343861213633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c31185c2ca035a6ead827c2171bec564ce2c89a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpi.dsone.3ds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devpi.dsone.3ds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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