www.ariba.com

- SAP SE -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:d2:ad:a0:f1:78:42:de:ce:09:26:5d:37:ef:d0:08 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SAP SE

Organization: SAP SE
State / Province: Baden-Württemberg
Locality: Walldorf
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d2:ad:a0:f1:78:42:de:ce:09:26:5d:37:ef:d0:08
Serial Number (int): 5081587935745769693489593903639154696
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 68:79:82:4d:c6:c3:69:04:31:b5:91:a0:33:8a:72:ef:b3:c3:e9:0f
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 09:8a:70:b4:8b:23:f2:55:49:4e:9d:8c:50:b4:e3:33:3b:4e:86:31
Fingerprint (sha256): 0a:61:3f:19:41:85:12:3b:44:be:1f:fd:2c:50:10:40:ba:75:2a:7a:b1:7c:7b:ab:99:1d:55:e9:24:ad:dd:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.ariba.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ariba.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ariba.com
ariba.com
go.ariba.com
jira.ariba.com
my.ariba.com

Other certificates including the domain name ariba.com

(limited to 100 certificates)
s1-2.ariba.com
*.us1.ariba.com
s1-ru.ariba.com
certs2.ariba.com
workforce.ariba.com
avatar.ariba.com
admin.snv.ariba.com
search-ru.ariba.com
mu.au.cloud.ariba.com
certs1-eu.ariba.com
search.auqa.cloud.ariba.com
developer.ariba.com
service-integration-legacy-ru.ariba.com
secure06.stage.lithium.com
service-integration-ru.ariba.com
connect.ariba.com
raquadrem.ariba.com
mds-us.floater.ariba.com
certs1-2.ariba.com
admin.snv.ariba.com
api.ariba.com
certs1.mn2.ariba.com
smetrics.ariba.com
service-2-ru.ariba.com
billingmanager.ariba.com
mn2.developer.ariba.com
info.ariba.com
admin.uex.eu.ariba.com
mn2.mu.ariba.com
workforce.ariba.com
connect.ariba.com
supplierexp.ariba.com
product-jira.ariba.com
go.ariba.com
certs1.au.cloud.ariba.com
s1-ea.ariba.com
certs1-integration-ru.ariba.com
adminss.mn2.ariba.com
brand.ariba.com
ebs.sapariba.cn1.ariba.com
api-2.ariba.com
certs1-integration.au.cloud.ariba.com
admin.uex.mn1.ariba.com
my.ariba.com
certservice-ru.ariba.com
menadc.ariba.com
acig.ariba.com
s1.ariba.com
s1-integration-eu.ariba.com
certs1-eu.ariba.com
integration.ariba.com
service-eu.ariba.com
service-integration-eu.ariba.com
mds-us.floater.ariba.com
mn1.developer.ariba.com
mu.jp.cloud.ariba.com
adminss2.snv.ariba.com
certs1.mn2.ariba.com
mn1.developer.ariba.com
eu.developer.ariba.com
certs1-2-eu.ariba.com
active.vault.service.eu1-mu.csz.ariba.com
s1.au.cloud.ariba.com
certs1-2.ariba.com
www.ariba.com
www.ariba.com
service.ariba.com
ru.developer.ariba.com
www.ariba.com
service.ariba.com
certservice-integration.ariba.com
tadd.ariba.com
mn2.mu.ariba.com
securelogin.ariba.com
rasnv.ariba.com
s1-2.ariba.com
eu.developer.ariba.com
developer.austg.cloud.ariba.com
safeguard.ariba.com
service-eu.ariba.com
testacig.ariba.com
exchange.ariba.com
es.ariba.com
jira-dev.ariba.com
as2.ariba.com
adminss.au2.gcpint.ariba.com
testacig.ariba.com
uex-2.ariba.com
openapi.au.cloud.ariba.com
ows.eufloater.ariba.com
service.mn1.ariba.com
certs1-4.ariba.com
developer.jp.cloud.ariba.com
testacig-us.ariba.com
service-2-eu.ariba.com
smtp.mn2.ariba.com
certs1.mn1-integration.ariba.com
s1.ariba.com
uex.mn2.ariba.com
s1.ariba.com

Certificate

The complete raw certificate details for www.ariba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5081587935745769693489593903639154696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAP SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ariba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 586576168881543401803900680841173737026549837808351968900148554423931462131876146342747907990911818702880875438095040974350201282329849712083654997278183541567433898843211893340442390702473138488142748883548541004517374867035512555541766879897355736637829450336149744710590326888843536205448153211405561637522948657224503653861562180295211428093117816855844126992420288290050579232936581468156392412187572631043043998750520279234778795601599260109563447664115937390380482551164907962221944155131051754561910514089414955622980561488269973733702801092926922363303014088405673194584053435869895682915013465565802467652468002481459596335843061981988657972827541030397947139084793525232987157791525057949380071943008209131595531266817448414103491525690550974668092017013943155973355744748817004632919767003275139564157910038772789866988939571583391975685587678817805618612983101990774723758868366332286145331817550358415358798383924818063222367325767164881670416100650663612480394526747855125852130051063472162004501002542548164360850098607304714886462951122708136733636267482633682545034857140054019853023891795874236733456709406923784305160181007915330094086140265598820400860853020314209237790625099786184937284790791860606528752040957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6879824dc6c3690431b591a0338a72efb3c3e90f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ariba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.ariba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ariba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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