atl-ntct-dgm-01.i.jasper.com

- Cisco Systems Inc. -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:8c:f3:57:ea:ea:79:ad:c4:3b:3f:09:01:66:6e was issued on by IdenTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cisco Systems Inc.

Organization: Cisco Systems Inc.
State / Province: California
Locality: San Jose
Country: US

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:01:8c:f3:57:ea:ea:79:ad:c4:3b:3f:09:01:66:6e
Serial Number (int): 85078642844090344668146636828321080942
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 99:1d:b8:49:1a:5f:bd:bb:29:38:53:3c:98:35:4a:78:b7:0c:1d:a3
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): 38:89:6f:9c:0f:08:fc:d2:48:3d:73:c7:25:b7:69:72:c8:9d:fb:d8
Fingerprint (sha256): 10:de:1b:63:3b:d7:f2:d8:5a:b2:0b:9c:31:55:7f:56:54:a3:43:28:63:f8:d6:2d:f9:e8:5a:86:14:2a:a3:8d

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate atl-ntct-dgm-01.i.jasper.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atl-ntct-dgm-01.i.jasper.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atl-ntct-dgm-01.i.jasper.com

Other certificates including the domain name jasper.com

(limited to 100 certificates)
cc6.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com

Certificate

The complete raw certificate details for atl-ntct-dgm-01.i.jasper.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cSMCXPAdmH/NbrBrGTZ
ad/QIFDJn4XmdUw9a+FU58UV1N1eNGT9DFr0ZkQDjbxHrDyjNIX8DJrXsF20mU2D
bJWTvsV1ES1efwRIH47l+D44yxNj/iGkOprEEi0zciWHT6Fvplk5kaixRSF8pYvL
/zAxmQZoxb9n4CUDeXmiywxpGv9uW9IHDxO7adu2Q1C1I88MgPaf5ScHZigqIpNi
jvXNvTY95OOTsxmhnJVOnh2vzrLkfPHmGaXPfc5fyay6xBS9784IqjZ4NfF9i7Sv
vi4mhJcZa/mZbHFRHY23VRNqnf5QWTDsqXJ9HAXDPMZjpmmcbFqZLN7shWalkNlW
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078642844090344668146636828321080942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:27:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 12:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atl-ntct-dgm-01.i.jasper.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29510446004566387360590733459299119899534685187401031859753743343670889192123495981208010577688708683781280808200524536178255322273124380854537028119392336331607422086174611647461706331485618131877017162671868056526949678987658213990548704628099861557897229981389130364246305081442397546779261835459478983208571342889969652565137481255105776511606346547392694477349650887636349608987372022226320978487765332164972178022877075040085064664716448369973221881839068769349557580384622808532266149897034404081750525949116625669288868262159909995203958899872976825463438214488086621244908578672865818702902041800927883122201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atl-ntct-dgm-01.i.jasper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							991db8491a5fbdbb2938533c98354a78b70c1da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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