mdm5.stage.nnanet.com

- Nissan North America, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:83:87:91:43:18:d7:7f:47:f1:59:1a:39:97:f9:66 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nissan North America, Inc.

Organization: Nissan North America, Inc.
Organization unit: IS-Infrastructure
State / Province: TN
Locality: Smyrna
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:87:91:43:18:d7:7f:47:f1:59:1a:39:97:f9:66
Serial Number (int): 4670624509968395116300307797602990438
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c0:ca:16:13:46:bb:ef:7b:f2:03:59:6b:5f:04:63:a2:fd:eb:11:77
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 24:53:a1:84:bb:13:56:47:1d:1d:82:39:b1:ae:f8:b2:65:20:cb:5c
Fingerprint (sha256): 08:cf:c3:fd:c4:2d:e5:73:01:46:77:19:03:44:90:73:9b:b8:15:ed:33:f7:2d:b6:97:5c:67:44:70:7c:d6:36

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate mdm5.stage.nnanet.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mdm5.stage.nnanet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mdm5.stage.nnanet.com

Other certificates including the domain name nnanet.com

(limited to 100 certificates)
stage.reports.nnanet.com
partsnet.stage.nnanet.com
ncido.nnanet.com
classicparts.stage.nnanet.com
straighttalk.stage.nnanet.com
myinfinitipop.nnanet.com
nci.mdm6.nnanet.com
partspronissan.nnanet.com
infiniti-us.financialstatement.nnanet.com
dbsapp.nnanet.com
vpp-canada.nnanet.com
carfax.stage.nnanet.com
businessmgmt.stage.nnanet.com
wictnis.nnanet.com
ncvportal.stage.nnanet.com
ifsportal.stage.nnanet.com
mdm5.nnanet.com
NissanNNAServiceMarketing.nnanet.com
new.nnanet.com
ssmysteryshop.nnanet.com
ownerfirst.nnanet.com
nissanaccessorycatalog.nnanet.com
nissangraphics.nnanet.com
COMV.NNANET.COM
dealertire.nnanet.com
ncioms.dev.nnanet.com
financialproducts.nnanet.com
infinitiamp.nnanet.com
ncioms.stg.nnanet.com
VISAapp.dev.nnanet.com
notor.nnanet.com
aftersalesdigitalinfiniti.stage.nnanet.com
ssmysteryshop.stage.nnanet.com
dealertire.nnanet.com
onmiparts.stage.nnanet.com
mdm5.stage.nnanet.com
www.nnanet.com
ecompanystore.nnanet.com
dealertire.stage.nnanet.com
aftersalesdigital.stage.nnanet.com
ownerfirstinvestinthebest.nnanet.com
partsnet.nnanet.com
vpp-canada.stage.nnanet.com
www.nnanet.com
nrcdealer.nnanet.com
onetoonerewards.nnanet.com
infiniticonnectionca.nnanet.com
dealer360.stage.nnanet.com
dealertire.nnanet.com
bo.stg.na.nissan.biz
infinitispiff.nnanet.com
financialproducts.stage.nnanet.com
ncipassport.stage.nnanet.com
Nissancollection.stage.nnanet.com
WARRANTYNISSAN.NNANET.COM
nci.mdm5.stage.nnanet.com
leads.nnanet.com
oms-b.nnanet.com
dbsdealers.stage.nnanet.com
carfax.nnanet.com
nissanordering.nnanet.com
nissancollection.stage.nnanet.com
documentprocessing.nnanet.com
towingadvantage.nnanet.com
tableau.stg.nnanet.com
reputationmgmt.nnanet.com
lms.nnanet.com
dev.publish.nnanet.com
servicemediacenter.nnanet.com
stage.author.nnanet.com
nissanownerfirst.nnanet.com
wictinf.stage.nnanet.com
sftp.dev.syssim.com
mynissanpop.nnanet.com
mdm.nnanet.com
nissanownerfirst.nnanet.com
nissanagreements.com
Infiniticollection.stage.nnanet.com
nddm.nnanet.com
dealer360.nnanet.com
brochurerequesthandraisers.nnanet.com
stage.nissanps.nnanet.com
comv.nnanet.com
nissanleadreports.nnanet.com
nmac360.nnanet.com
financialproducts.stage.nnanet.com
rpa.nnanet.com
nissancollection.nnanet.com
icv.nnanet.com
infinitipacanada.nnanet.com
ifsportal.nnanet.com
dealertire.nnanet.com
inspiredperformersreward.stage.nnanet.com
wictnis.stage.nnanet.com
redirector.nissan-ix.com
nissanfunding.stage.nnanet.com
infinitiartwork.stage.nnanet.com
documentprocessing.stage.nnanet.com
rpm.nnanet.com
nissan-us.financialstatement.stage.nnanet.com

Certificate

The complete raw certificate details for mdm5.stage.nnanet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3idDVD+3goEaq8dRLFA2
fRTKbQceV83WZ2x2Ba1X78GNfWjQl2OJcHIpsOKNuTgwjX2DLSiPRTVCGj+aOtGt
7AWx5c70mqGfmPdbhDATlarNRPbn384G0Pj8/Ek4zpARRzlXAEVZIdZMPJWTgh/i
EkI7lXi0kGW2xCnI5enmvx49tPCtyrLM1cIpBlV9PX8VbJfz7i9O3yQdy1/uI9zT
KZH+41fL6JO0JcneH4eF86e5O90YzcmYPB8DobINLZ69Yl3Zd66Z2ArQJjYm+sHy
+XwEm9ugqKG6wsA/249eA4dj0oQ+ych3cpjkpSRnNm5qTOo00rWx0xbVo8nzFde5
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4670624509968395116300307797602990438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Smyrna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissan North America, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS-Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mdm5.stage.nnanet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28044265011484359576250597730490765131820320187484473853491571229801180244777057715142291701625096609574939916314629478087343468416961028721147548540901169184880701869176624854259435039162037085392219239705102963442671679854787046083100393637395021536200350461174047504409080376330652816930718948503223302050470677482949045603878097801222344202227587014831640718147403305372806669739053795718139806862449320569176083636257032502378943827128661974488630066829551997999483717023652920798930058434167784231306361785973905837861854539133010095297032362994611996074808402378565081870197076338374176632128114396177588795731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0ca161346bbef7bf203596b5f0463a2fdeb1177
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm5.stage.nnanet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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