extapi.adm.com

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:28:f6:21:45:fc:9a:4b:0a:f7:e4:59:d6:9d:26:41 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:28:f6:21:45:fc:9a:4b:0a:f7:e4:59:d6:9d:26:41
Serial Number (int): 6858823962217677364257901847083034177
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ad:02:46:6e:87:8d:f5:52:12:b6:60:d7:e2:ae:fe:f7:2f:a9:77:d4
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): be:81:e6:1e:01:af:81:b6:cd:21:f8:41:83:3b:4a:ed:da:52:a2:9f
Fingerprint (sha256): 10:92:92:d0:60:5d:e9:19:ea:fc:b8:17:81:51:cb:0e:bb:9e:77:46:bd:fe:3d:20:4a:a5:57:58:2f:b7:5c:44

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate extapi.adm.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extapi.adm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extapi.adm.com

Other certificates including the domain name adm.com

(limited to 100 certificates)
sso.adm.com
*.adm.com
*.adm.com
*.adm.com
preprod.wisium.com
*.adm.com
iq.adm.com
extwebfarm.adm.com
qaext.admnaapis.adm.com
cloud.notifications.adm.com
extapi.adm.com
meet.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
cloud.notifications.adm.com
*.adm.com
adm.com
san-3-s12.tlsprovisioning.exacttarget.com
*.adm.com
guest.adm.com
getpaid.adm.com
meet.adm.com
*.adm.com
*.adm.com
SipEU.adm.com
meet.adm.com
*.adm.com
*.adm.com
image.email.plasticbank.com
learningcenter.adm.com
ADMO365SBC.adm.com
myvpn.adm.com
go.adm.com
hybrid.adm.com
myemail.adm.com
learningcenter.adm.com
*.adm.com
*.adm.com
asoa14.adm.com
devext.admnaapis.adm.com
timber.adm.com
myemail.adm.com
myemail.adm.com
extwebfarm.adm.com
adm.bynder.com
*.adm.com
learningcenter.adm.com
myIM.adm.com
sso.adm.com
myaccess.admworld.com
san-3-s12.tlsprovisioning.exacttarget.com
meet.adm.com
*.adm.com
*.adm.com
as2p.adm.com
image.email.plasticbank.com
sso.adm.com
myvpn.adm.com
extranet.adm.com
*.adm.com
myim.adm.com
click.notifications.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
*.adm.com
myadm.adm.com
hybrideu.adm.com
image.email.plasticbank.com
preprod.adm.com
conference.adm.com
*.adm.com
meet.adm.com
*.adm.com
*.adm.com
adm.com
myadm.adm.com
myemail.adm.com
hybridsa.adm.com
ecmprd.adm.com
image.email.plasticbank.com
learningcenter.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
adm.com
sip.adm.com
*.adm.com
ecmprd.adm.com
*.adm.com
*.adm.com
ctxgateway.adm.com
sip.adm.com
*.adm.com
myaccess.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
sip.adm.com
*.adm.com
*.adm.com
adm.com
sapfiori.adm.com

Certificate

The complete raw certificate details for extapi.adm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CU7cQT8lVYcTkZZNvkQ
ZNYsJG7rhH1eAReL7czZwSzi49NPcB9iGHmtB+7bNoEiXKdSuVqifH8rQlmQ88mD
A8sWDRSPcVqIdlkCEpLwZYWH4rUQr1TsssYSr+bQydpnurf1fX+xEq8J67UhCmuz
vbK1zA1yhEwIHcGVSFIfPw/m8FDVmpZHvy94K3y5q3j4X3bBfCIb1evDzJSLJCcQ
XHN74fJqa+uvBaUKJ7UTn0o5qVzXxglo8TSqxE7K3rr90x4LMdqy8uGFZjKTPiGE
C96RduGkI9/HLOMxnCufnuIpWUMNf6mjph57kKZXZNHirNCIhCzbJoVwpZSxyIu7
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6858823962217677364257901847083034177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extapi.adm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28295740191190677168271114060731137493732569111188104180727158888319978038316364176737816315929455495199937584336064943847413804436145753582312432493222158244406765901132310471316452590179781331666417796654469019672869976028325448888816135512848613077809763160986570667186265380523446528505859527788841545807034844791054911132152356724566305440736262997510194616816577993196114131042884893283446916132644381242250485783068180649330366558858434485128880143371187717731396649143365409106916213676940816766655097302131958009032340662565726569277024399630080387856148890207433062315668260958142221858078045977008421977009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad02466e878df55212b660d7e2aefef72fa977d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extapi.adm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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