nrp.ks.uat.aixsol.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:f2:93:78:a9:9b:e8:77:e8:92:be:f0:4c:28:bb:da was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nrp.ks.uat.aixsol.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f2:93:78:a9:9b:e8:77:e8:92:be:f0:4c:28:bb:da
Serial Number (int): 2588754909633030629073840411536571354
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e0:59:4e:6c:d6:39:f3:6b:65:fa:14:9a:bb:8a:cf:1a:4e:65:54:0f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 47:d4:8e:fc:ec:fa:29:57:04:3a:33:4e:15:34:8b:63:de:d3:c0:d6
Fingerprint (sha256): 0e:66:4a:7a:9e:4b:8b:b0:26:b9:8e:e5:22:35:74:1b:73:43:42:d9:0a:a3:cd:ac:73:52:b9:97:88:cc:29:b0

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate nrp.ks.uat.aixsol.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nrp.ks.uat.aixsol.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nrp.ks.uat.aixsol.com

Other certificates including the domain name aixsol.com

(limited to 100 certificates)
dentalapp.aixsol.com
api.auth.uat.aixsol.com
sportsix.aixsol.com
nhm.aixsol.com
marketing.aixsol.com
portal.analytixsolutions.com
stage.aixsol.com
vet.insight360.aixsol.com
insightcaptureapi.dev.aixsol.com
pm.aixsol.com
nrp.ks.uat.aixsol.com
stage.aixsol.com
portal.analytixsolutions.com
cadpm.aixsol.com
odp.mdm.uat.aixsol.com
intacct.aixsol.com
cadpm.aixsol.com
stage.aixsol.com
insightconnect.dev.aixsol.com
portal.analytixsolutions.com
aixsol.com
portal.analytixsolutions.com
pm.aixsol.com
portal.analytixsolutions.com
portal.analytixsolutions.com
cadpm.aixsol.com
portal.analytixsolutions.com
cadpm.aixsol.com
orp.ks.uat.aixsol.com
portal.analytixsolutions.com
nhm.aixsol.com
portal.analytixsolutions.com
portal.analytixsolutions.com
hospitality.insight360.aixsol.com
portal.analytixsolutions.com
intacct.aixsol.com
portal.analytixsolutions.com
dentalapp-prod-afd.aixsol.com
api.pos.uat.aixsol.com
cadpm.aixsol.com
hrms.aixsol.com
api.user.uat.aixsol.com
hospitality.insight360.aixsol.com
portal.analytixsolutions.com
cadpm.aixsol.com
nhm.aixsol.com
sites.sunbeltsol.com
stage.aixsol.com
nhm.aixsol.com
sites.sunbeltsol.com
portal.analytixsolutions.com
portal.analytixsolutions.com
nhm.aixsol.com
stage.aixsol.com
hrms.aixsol.com
nhm.aixsol.com
aixsol.com
stage.aixsol.com
aixsol.com
stage.aixsol.com
portal.analytixsolutions.com
marketing.aixsol.com
portal.analytixsolutions.com
www.aixsol.com
portal.analytixsolutions.com
cadpm.aixsol.com
hospitality.insight360.aixsol.com
cadpm.aixsol.com
hospitality.insight360.aixsol.com
dentalapp-stage-afd.aixsol.com
aixsol.com
stage.aixsol.com
aixsol.com
api.weather.dev.aixsol.com
*.aixsol.com
portal.analytixsolutions.com
portal.analytixsolutions.com
portal.analytixsolutions.com
sportsix.aixsol.com
sites.sunbeltsol.com
projects.analytixav.com
demoportal.aixsol.com
dentalapp-stage-afd.aixsol.com
pm.aixsol.com
nrp.uat.aixsol.com
nhm.aixsol.com
dunkin.insight360.aixsol.com
dentalapp-stage-afd.aixsol.com
nhm.aixsol.com
hrms.aixsol.com
nhm.aixsol.com
portal.analytixsolutions.com
hospitality.insight360.aixsol.com
cadpm.aixsol.com
sni.cloudflaressl.com
api.weather.uat.aixsol.com
dentalapp.aixsol.com
portal.analytixsolutions.com
api.sales.uat.aixsol.com
aixsol.com

Certificate

The complete raw certificate details for nrp.ks.uat.aixsol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nB4QRbqQy8biNQps4SH
cfeEx6981rp7Qt0ARChPX5jt39/myvyakARsRjMMCq0GOOWtkPUGhEp50KF704qg
O2L8sNDur3aknJRast1z73U5tk8dJ+V2HXN9jsNYvkm3MAhLgslyATrdFAwqTnZE
KrH94oKzstSkDlRpCU75aONS8ru+iFWLr75YqrnafJjJaJ5q+RZ3h3Qow8K1Df/S
dONT2KzEp5S92BguJZitJejSMyDkIxnV7zAoyR31f25jN9YHP84nleVeCjDxQ/9n
Cs9HMtKNAlpEMWH30FBC+mFHb0S9uj/y3NFfz1PxKY40piRiR0H7SRxwfQ/5T2R0
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2588754909633030629073840411536571354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nrp.ks.uat.aixsol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28585317819750779128890570985505683600359124534453212823919785137982690087330848513048158573021461563472498552456723272669251520281960500807708357909956144348937397529338838890891544817302327845528451633140744644543289310012896759323155383307049881217485906825642431074417890414678558163492751857962494177143947919737919979048126317976162676796061023757996278202631587754093242273601289690909568458504344578449129817682943718836040622116588218480107528862781214381403534822171169613345796322943140733935724649070016023552707591124264281722389344288927177395903268629729587628358456127221248290506517466462507426411773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0594e6cd639f36b65fa149abb8acf1a4e65540f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrp.ks.uat.aixsol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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