ca-west-1.fortianalyzer.forticloud.com

- Fortinet, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:00:26:5f:a8:1a:91:c5:da:3c:50:1d:1e:f7:fb:e1 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fortinet, Inc.

Organization: Fortinet, Inc.
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:00:26:5f:a8:1a:91:c5:da:3c:50:1d:1e:f7:fb:e1
Serial Number (int): 11963830272330222588892527533265255393
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:da:2f:6d:6e:47:d2:82:24:fa:65:7e:2a:34:05:c7:c4:94:88:41
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 31:af:d3:46:7a:96:ad:15:10:af:59:a3:ee:13:ed:a2:20:13:c1:50
Fingerprint (sha256): 0e:97:99:c1:4a:3f:aa:ed:82:50:71:a6:71:79:e2:f1:d2:44:6e:5b:d3:e1:04:73:d0:b6:e0:a2:41:7d:48:4f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate ca-west-1.fortianalyzer.forticloud.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ca-west-1.fortianalyzer.forticloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ca-west-1.fortianalyzer.forticloud.com
*.ca-west-1.fortianalyzer.forticloud.com
fortianalyzer.forticloud.com

Other certificates including the domain name forticloud.com

(limited to 100 certificates)
check24status.mambu.com
azfra1status.mambu.com
amtrust.kinnser.com
ca-west-1.fortianalyzer.forticloud.com
12a10fad.status.cleafy.cloud
azfra1status.mambu.com
darryltest.atl-css.net
azfra1status.mambu.com
azfra1status.mambu.com
12a10fad.status.cleafy.cloud
dalestatus.mambu.com
azfra1status.mambu.com
cddos.status.radwarecloud.com
darryltest.atl-css.net
bb2status.mambu.com
*.fortinet.com
darryltest.atl-css.net
status.509.equinixms.com
12a10fad.status.cleafy.cloud
au.status.clio.com
azfra1status.mambu.com
forticlient-status.forticloud.com
*.fortinet.com
azfra1status.mambu.com
darryltest.atl-css.net
162-internal.networkstatus.co.nz
au.status.clio.com
*.forticloud.com
162-internal.networkstatus.co.nz
*.fortianalyzer.forticloud.com
forticlient-status.forticloud.com
beta.status.veracode.com
au.status.clio.com
ca-west-1.fortianalyzer.forticloud.com
azfra1status.mambu.com
au.status.clio.com
check24status.mambu.com
azfra1status.mambu.com
amtrust.kinnser.com
azfra1status.mambu.com
12a10fad.status.cleafy.cloud
status.509.equinixms.com
check24status.mambu.com
darryltest.atl-css.net
check24status.mambu.com
azfra1status.mambu.com
*.forticloud.com
darryltest.atl-css.net
forticlient-status.forticloud.com
cddos.status.radwarecloud.com
dalestatus.mambu.com
status.509.equinixms.com
azfra1status.mambu.com
status.509.equinixms.com
beta.status.veracode.com
azfra1status.mambu.com
162-internal.networkstatus.co.nz
au.status.clio.com
check24status.mambu.com
*.ems.forticlient.forticloud.com
dalestatus.mambu.com
*.fortinet.com
au.status.clio.com
customdomain.stpg-personal.space
status.509.equinixms.com
myip.fortinet.com
azfra1status.mambu.com
customdomain.stpg-personal.space
*.forticloud.com
12a10fad.status.cleafy.cloud
forticlient-status.forticloud.com
*.forticloud.com
status.509.equinixms.com
162-internal.networkstatus.co.nz
au.status.clio.com
socaas.forticloud.com
customdomain.stpg-personal.space
darryltest.atl-css.net
darryltest.atl-css.net
forticlient-status.forticloud.com
cddos.status.radwarecloud.com
162-internal.networkstatus.co.nz
azfra1status.mambu.com
au.status.clio.com
azfra1status.mambu.com
customdomain.stpg-personal.space
azfra1status.mambu.com
status.509.equinixms.com
darryltest.atl-css.net
check24status.mambu.com
amtrust.kinnser.com
au.status.clio.com
162-internal.networkstatus.co.nz
darryltest.atl-css.net
au.status.clio.com
customdomain.stpg-personal.space
162-internal.networkstatus.co.nz
cddos.status.radwarecloud.com
amtrust.kinnser.com
bb2status.mambu.com

Certificate

The complete raw certificate details for ca-west-1.fortianalyzer.forticloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/8Mh5BZdGYS3plwNW9o
jkitJivV5vsdZkQo/RGHxNB2XcLxN9p9h2WZt8432n5JMiVTchV86uoeTJaZcuzs
ZOJs9zWHd+g9jlNMoliY4sMYaRSFzhGfpRa+yLxWtz3aUI6mD6a50kOO0qQk3MNZ
A5t9zvrmmnl2UJYW3i8kMXpl4rohuhbr3j9BuDQBP+zZU3BjgvYIxnVZZLkb38aM
hcWu3p6Oe7GPuplTfZByfpbtnFzLTKcfnr4UqZ730bRMBWUW73uOoSHS6AQ0ZQXP
WBdP0IPerV62Erur03fECNraZP+7iXpFkFISKQEqbIQaOv69JJ8xKdgiV0xrnqrj
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11963830272330222588892527533265255393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fortinet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ca-west-1.fortianalyzer.forticloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23732332350199550711491844469266083657733892640702372200024593954772899341669710643379374227199769776250034807529283618476779752693343754268821567021712854552435485699249043728958102124810904849804817467740237580315407256933407040201405939854425462569776080627951847979432120541463961187009664853439802209498955864443216120357283658674625441560136924823326957003383911612216612069212944697158869390825692984107339057568008669229941809323247264209496486065350110353326170126096945667826584345709280888540231647863634063358447896858122765196412202473828625409833826470762377219553708538522411848082757026119397147337513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eda2f6d6e47d28224fa657e2a3405c7c4948841
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-west-1.fortianalyzer.forticloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-west-1.fortianalyzer.forticloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortianalyzer.forticloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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