macquarie.dealogic.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:75:37:5a:67:09:9c:69:4e:9b:d8:93:0c:ac:b1:95 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=macquarie.dealogic.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:75:37:5a:67:09:9c:69:4e:9b:d8:93:0c:ac:b1:95
Serial Number (int): 11242445393679303917151113298351796629
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:5b:e9:15:3a:56:c5:f4:e7:d2:1e:78:63:b5:82:6b:69:55:14:ba
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 36:1d:16:3a:0a:67:0c:c3:5e:4c:b0:31:e5:d8:2c:53:1a:df:ff:bb
Fingerprint (sha256): 09:ff:2d:41:5a:72:ce:95:61:b7:bb:1a:02:bf:f9:3c:1e:a8:28:9b:f8:b8:5b:7c:cf:6a:9c:cd:c0:ed:1e:d6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate macquarie.dealogic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for macquarie.dealogic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

macquarie.dealogic.com

Other certificates including the domain name dealogic.com

(limited to 100 certificates)
bmocmuat.dealogic.com
bradescouat.dealogic.com
sebenskilda.dealogic.com
itausec.dealogic.com
dealmanager1.dealogic.com
golddisc.dealogic.com
cm-cic.dealogic.com
unicredit.dealogic.com
sni10434gl.wpc.edgecastcdn.net
uatdawsald.dealogic.com
bankvontobel.dealogic.com
fixep-oat.dealogic.com
dlhub-poc.dealogic.com
*.dealogic.com
nordea.dealogic.com
production.services.dealogic.com
msdmuat.dealogic.com
sandler.dealogic.com
api.host.cortexuat.dealogic.com
dealaxis-hub-prod.dealogic.com
macquarieqa.dealogic.com
uatepm2.dealogic.com
compliancemanagerps.dealogic.com
arionuat.dealogic.com
rbsuat.dealogic.com
sentineltokensigninguat.dealogic.com
baaderuat.dealogic.com
functions.digitalipo.dealogic.com
intermonteuat.dealogic.com
searchengine.analytics.dealogic.com
batomi.dealogic.com
suntrust.dealogic.com
paretouat.dealogic.com
retailipo.dealogic.com
dbsuat.dealogic.com
mmp.dealogic.com
ubscmuat.dealogic.com
signalhill.dealogic.com
testservices.dealogic.com
renaissancecapital.dealogic.com
nomsmp.dealogic.com
dealogic.com
dealogic.com
msdcm.dealogic.com
cicc.dealogic.com
gsuat.dealogic.com
www.dealogic.com
mainfirst.dealogic.com
bocom.dealogic.com
cmcicuat.dealogic.com
contactscraper.sourcingdev.dealogic.com
ubsuat.dealogic.com
anzdcmuat.dealogic.com
motif.dealogic.com
ia.dealogic.com
essenceuat.dealogic.com
mediobancauat.dealogic.com
vtbcapitaluat.dealogic.com
shorecapitaluat.dealogic.com
dbeventsqa.dealogic.com
nbaduat.dealogic.com
raiffeisenuat.dealogic.com
rbc.dealogic.com
sentinelip.dealogic.com
abgsc.dealogic.com
dbsuat.dealogic.com
testservices.dealogic.com
ing.dealogic.com
sentinelip.dealogic.com
dealogic.com
efg-hermes.dealogic.com
vtbcapital.dealogic.com
api.jira-integration.supportdev.dealogic.com
macquarie.dealogic.com
frameworkwebuat.dealogic.com
jefferies2.dealogic.com
cms.dealogic.com
danskemarkets.dealogic.com
itausec.dealogic.com
loader.spac.analyticsqa.dealogic.com
csecmvault.dealogic.com
arcticsec.dealogic.com
evercore.dealogic.com
credit-suisse.dealogic.com
anadc.dealogic.com
macquarie.dealogic.com
entities.ingestor.dealogic.com
troika.dealogic.com
fbrpulse.dealogic.com
gazprouat.dealogic.com
processor.sec.ingestorqa.dealogic.com
natixis.dealogic.com
cbaecmuat.dealogic.com
hkuat.dealogic.com
sentineluatfp.dealogic.com
fbruatpulse.dealogic.com
mdsservices.dealogic.com
standardbankuat.dealogic.com
bancaimi.dealogic.com
numis.dealogic.com

Certificate

The complete raw certificate details for macquarie.dealogic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGYNEx17VkIhaDZMM8k8
0HaC9xevI/MIkoKHhkHzE5gHjuVzTxOgVTgWO6iaaBTvJKmai5JbX0rYjFP1cSsh
2b6HuV0XNwW/rkD6IYdpKNVEksxnOyxIl4ac7Y0g/IK5magbt1ax1oKl18x/+BAN
42XcpWqUbCdhNgm/1RcOL/Lv7+sFjIVy2JNmHHqBAVz5a+mc/5yoCUqaPysUv+T7
u0GoOi2CD1q8cSzGYdHJFHosItZvzsaToqovea+tK1OSdjGjwJZh142CwTkEW9tE
W11uAzgPgMxRR3id6okgLLX2hM5KN9oRNyvUT4MLjc/gOEI3yRPM86V8QbM+18Wf
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11242445393679303917151113298351796629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'macquarie.dealogic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19238545614473426755392471847303410023815191176968190325338072089755102645098132960485164049587346811209227073471554045033808046987213802284827688355243360483830628140837471811689933060094999619061236565093869564693273456547674004789932180632407941480603789044164414428461617730335845693154589381756249006505244432709942472411705436185858514643865810526332633828147215779667277027866224649429690047052848691859099974037692054695998912116697994313606744835913815393500469442297219856256405953027277531641333742253483721277894580087863537268566618244829339565702716269895198487578174462082980071766531162587559914479549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c5be9153a56c5f4e7d21e7863b5826b695514ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macquarie.dealogic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3d07220d0000040300473045022100b6be6ce00ce16dd6a6593adcc8670bcf8f2f52608abc8534137d79d0195d1b3402206d6083f85447a5a9cf5186652169fb34efcffc5c83b68baa25b0004c364981b100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3d0721ce000004030048304602210098c14201e3e73aebaa1c8b5a61ff87cac23df19967346b209117f223634eb084022100bbc5b692940098d4850cc322ec586109c0085a6b7b7606701542560fa84a46f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c3d0721bf00000403004830460221009b0110bbabd57a058a5447346e8e85220e08de886cb24556b6653c5add16ac61022100cfe6b25d1a8cdcaba55e42fd102f3f3dcfcee345df0c9311c7e5462c00ff8c93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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