integration-pmw.ea.holcim.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 3c:27:2f:d6:0f:bc:ef:cf:f7:a7:b8:fc:29:3c:6c:c7 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=integration-pmw.ea.holcim.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:27:2f:d6:0f:bc:ef:cf:f7:a7:b8:fc:29:3c:6c:c7
Serial Number (int): 79957149557526646016137874373317782727
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 98:38:aa:5f:73:79:fb:93:d5:c7:dd:6a:24:cf:76:f3:36:24:d3:4d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 19:72:87:e8:de:2b:fc:81:c9:43:69:bb:e0:1a:77:b5:ee:0b:e6:a2
Fingerprint (sha256): 0c:e1:5d:6d:a7:58:b3:74:20:66:64:61:90:73:9c:c4:e5:42:94:a7:01:62:19:89:fb:ac:6f:b7:58:09:7c:64

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate integration-pmw.ea.holcim.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for integration-pmw.ea.holcim.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

integration-pmw.ea.holcim.net
www.integration-pmw.ea.holcim.net

Other certificates including the domain name holcim.net

(limited to 100 certificates)
corporate-ise2.hgrs.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net

Certificate

The complete raw certificate details for integration-pmw.ea.holcim.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79957149557526646016137874373317782727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'integration-pmw.ea.holcim.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709286435337448236003343836365691782830212797300093714545156483582746805910188507781187696737352284829838321406071400238109610055534409454107943729749318778804543369917651691260643122775742437096973807536935035725224322200840269338807652767244847405750750929040692311007510398060909675612641450938654447768912440268939272579469257321396370935017083944928825771545351451008408472058849428683472523597679674270974652450604557711889624721617550857826077855922450174130304848714168190005934974773813095040698250950386039112840199838006406787917195023847192160820266707981798029586323239200468109825192750998051600048949122914351590832074180618458921354231784890442533804655253062132807255327153363401091360464079227410282190874384218929828403049029775773290659302980572473929484314172503986356509985914886677879231698957019928574620962972285264036290906425070726985985807610338896915712550743712930092265884094250062601498023284952250975790769123952885238165933024865218384134427106094861013639172594661849697047704125204174279539492458306608503197461271285124154109937103867597261817218128968850347005579295559991191580613233428348116554173771499103750425178553435978472928623573887329421010378682547101591086066377403265793144341127291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9838aa5f7379fb93d5c7dd6a24cf76f33624d34d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration-pmw.ea.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integration-pmw.ea.holcim.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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