sim-swap.aks.dev.digicelgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:f9:65:14:3f:80:24:de:12:03:34:11:90:6f:be:9c:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sim-swap.aks.dev.digicelgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:f9:65:14:3f:80:24:de:12:03:34:11:90:6f:be:9c:25
Serial Number (int): 401864695570319767919441897769591862369317
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:96:e9:50:2b:1b:24:f6:a3:9f:eb:58:9b:c6:bd:91:e7:ee:8e:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:b7:d3:e1:a0:06:38:f7:6a:9f:ac:aa:25:4c:ec:f5:1b:45:a1:d0
Fingerprint (sha256): 11:01:b9:43:a8:b3:c2:15:13:b1:b8:1b:89:59:63:ee:3b:89:f2:8a:da:64:9f:e1:25:f7:f5:28:a2:68:72:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sim-swap.aks.dev.digicelgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sim-swap.aks.dev.digicelgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sim-swap.aks.dev.digicelgroup.com

Other certificates including the domain name digicelgroup.com

(limited to 100 certificates)
support-bb-play.digicelgroup.com
online-top-up.digicelgroup.com
ITCMA.digicelgroup.com
aapprofile.aks.dev.digicelgroup.com
*.onlinetopup.digicelgroup.com
author.digicelgroup.com
incapsula.com
boardpad.digicelgroup.com
helpdesk.fintonhouse.org.uk
geoip.aks.dev.digicelgroup.com
mydigicelplay.digicelgroup.com
staging-network.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
helpdesk.fintonhouse.org.uk
pod.digicelgroup.com
qa-bill.aks.dev.digicelgroup.com
qa-bill.aks.dev.digicelgroup.com
imperva.com
incapsula.com
staging-aapprofile.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
management.calajm001.azs.digicelgroup.com
staging-aapprofile.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
support-bb-play.digicelgroup.com
support-bb-play.digicelgroup.com
incapsula.com
servicedeskpacific.digicelgroup.com
staging-esif.aks.dev.digicelgroup.com
staging-memcached.aks.dev.digicelgroup.com
sif.aks.dev.digicelgroup.com
incapsula.com
staging-web-admin.aks.dev.digicelgroup.com
digicelgroup.com
incapsula.com
qa-reward.aks.dev.digicelgroup.com
online-top-up.digicelgroup.com
management.calajm001.azs.digicelgroup.com
helpdesk.fintonhouse.org.uk
map-publisher.aks.dev.digicelgroup.com
incapsula.com
reg-jm.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
support-bb.digicelgroup.com
digicelid.digicelgroup.com
portal.calajm001.azs.digicelgroup.com
bill.aks.dev.digicelgroup.com
incapsula.com
online-top-up.digicelgroup.com
livechat.digicelgroup.com
qa-transaction.aks.dev.digicelgroup.com
webmail.digicelgroup.com
helpdesk.fintonhouse.org.uk
dev-selfcare.aks.dev.digicelgroup.com
moncash.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
pgw.aks.dev.digicelgroup.com
incapsula.com
dcportal.digicelgroup.com
incapsula.com
incapsula.com
support-bb-play.digicelgroup.com
dev-selfcare.aks.dev.digicelgroup.com
incapsula.com
incapsula.com
adminportal.calajm001.azs.digicelgroup.com
incapsula.com
incapsula.com
incapsula.com
qa-mybill.aks.dev.digicelgroup.com
moncash.digicelgroup.com
incapsula.com
sim-swap.aks.dev.digicelgroup.com
staging-pgw.aks.dev.digicelgroup.com
online-top-up.digicelgroup.com
support-bb-play.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
staging-network.aks.dev.digicelgroup.com
htap000.digicelgroup.com
*.digicelgroup.com
device.aks.dev.digicelgroup.com
service-map-authentication.aks.dev.digicelgroup.com
incapsula.com
management.calajm001.azs.digicelgroup.com
digicelgroup.com
support-bb.digicelgroup.com
incapsula.com
otuccadmin.digicelgroup.com
credit.aks.dev.digicelgroup.com
qa-device.aks.dev.digicelgroup.com
careers.digicelgroup.com
digicelgroup.com
dev-selfcare.aks.dev.digicelgroup.com
ITCMA.digicelgroup.com
mailer.cignafinans.com.tr
incapsula.com

Certificate

The complete raw certificate details for sim-swap.aks.dev.digicelgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5St1KYIIi9GsmW21e+QL
sraU9vC7Ce8HP9RJShyjZpFt3+Z2yi5nDSrH7N8yeugzHxdui5rW2XwOrn/y6UPk
r2FEtlGrsOjLttBah7l0vUHIK/ZtBZsD+opok3WH/CemMOpmN6+YUZrb6gHaGg4o
sAS8mqo1T4zJJURa+hPIa8OaPAyhwewKiDOA2yxTcOvDNTTu36NlhviDtswasa+E
xbMOuokAnS+djkbWJ0IN/RaSUoliRtqJhFtTcsalERCl2/CaSuZqMf51ssTCoXl8
X50kn73gI6qTTjsE7MayLqSgjod79G+VNYuoUcbh7vqMTxPVMIlEySG0k/u/Phyi
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401864695570319767919441897769591862369317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-25 14:38:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-24 14:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sim-swap.aks.dev.digicelgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28930001610345663533132577944095343969873904885837818672181351452642178452799225277511962095693391649320744235684453553731090357545481893310947088320040030197544981983278372883001947701353971178864314527163251260205222746010228934691078865610906472064233411623331002162094689898099164528698397657252386468199768927318695842350319606774908567697917578819006122895061202398207430327693032083890996980093916716531453495626650092299606518809890085030740962787987253605236921868329860257549346393840173570641511067363619891515999125286891079308010154455982764801349929304222433572937982468204805605059631624652782128898743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d96e9502b1b24f6a39feb589bc6bd91e7ee8e37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim-swap.aks.dev.digicelgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017c1d9b2e730000040300473045022100f85d943799c64e8699cb51ae966cc2a8b775dd607fa8fb40680d20b78a2188330220142faedc8765840c351005ad4c4d715def41ed425aec724b66d96ea58cd26f7a007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c1d9b2e630000040300473045022050f824db70dbab1d492494aba02f994deb76954c0a2b859cff5aeef0e4d5f09a0221008395aff4cbeef7f4a4e02f6a7ab17ee7bc5c81539e04e6a9c0661850e46168da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009980d9bcf0835575a7431f0027517966ec70bafdf4790d54c1b626f6efdbd4bf39df42391aa42c0e848325519a2b37d649d42a74952ecfeee636418c327279ff885b86ab37a8d19391d4bab934c1e4ccac224a59a0b21ea40f42cb912d6b96927c914bbd1acc9395f995a31dba3f9f970515ba4e0886a1751e21e6163d3cc620c30c11ee942ddf0831c84e1a89fc8c438c6bcd1c18b917e536857c27867154d2de33f5d27ad1121e295f376425ff2b247434b26d8aae11a6ff70c83c1e495b48309d9411fa0270a4736041077358783d22c9d929d2c5945738a7e0f7b4b3de60e4040bd1155a1e0f95fd8a647125e1930fbfe7b517362460b3973e78f9b1bfa2