*.OnePLM.com

- OnePLM Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:55:58:9b:3b:13:61:2c:43:cd:e0:d2:bb:29:60:db was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OnePLM Limited

Organization: OnePLM Limited
Locality: Witney
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:55:58:9b:3b:13:61:2c:43:cd:e0:d2:bb:29:60:db
Serial Number (int): 20381562320442553556075255423956508891
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:a8:42:2c:0e:10:c5:1c:71:10:31:9f:c8:c7:57:a3:bd:96:ad:a0
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 09:a3:55:2c:47:b8:f2:f3:6c:a6:dc:a2:21:67:61:8b:17:cd:41:6d
Fingerprint (sha256): 12:db:86:8f:96:57:f8:89:bf:e4:0b:9f:7a:60:5a:25:c7:63:2b:d5:ae:04:3c:95:a5:92:d5:d7:69:54:e8:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.OnePLM.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.OnePLM.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.OnePLM.com
OnePLM.com
signature.oneplm.com

Other certificates including the domain name OnePLM.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.OnePLM.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20381562320442553556075255423956508891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Witney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OnePLM Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.OnePLM.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733684524595492536493270948868549440967496330627671302384900944392502794309783852900562235243218197833240713002771416811593562160678125764822034636560450637976828113995413701121406519272500468028765610437644954443459750366369779347336747233269144774893905215501075345550430363936996327972127661568573911131643752705310888066762668810153448006497076230180280634825749738110041294002269285034822680679055928719767155306247639306329884738777310648075152288091477781656903456057743987617475917031205843679770522410096048127783711233019899831421997428497156082426888880939373933906356966039635765069805701573142876128025528706592060836252016196666183303613539904257087933876492332711000162570500662881318539804789263969860284160535935083162677784446549229073168292373175223865016114742314881109133115029689711670395160335874559248765350615816063063824038092678963632721244051758373615249612055716677673334120143606042257460445145886627655657390674108696474237457685609709972178270115546739099897421386528572459189476590108866592627772482724214896936283020455835239093232558557913772142708463661493422950803341747209955692866594656267668758883868335211530421097874227484176880086406549105797913367271346398671376327287419361887651466782777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0a8422c0e10c51c7110319fc8c757a3bd96ada0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.OnePLM.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'OnePLM.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.oneplm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001879e86f4a500000403004630440220473b2c12d1d26e1481dad1cdaf1318ea70889a46c84b3f99ff8bc7a16b9921d802204d16c86cb9b79bf7b7e3e51642c416dda26212bb021ddf3b04f0451335fbbb5900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001879e86f4df0000040300483046022100e9e1a9bab8348bc95ac66cab373ce6b09b5a8b4df6c2e98f060ab6458a41bcb1022100c0ccbeebbfb6d5f0b082bac75d1c5c6095c2c70c29875f8514f80fc8357b0831007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001879e86f4aa00000403004730450220688d5ec2c93274524d56232f94ced13c5530cee5f485c4de2a362aaf090f9d3e022100a8c51eadd7986db2e7a6a1d15ff294df5877e3a20532843d4f0324e6a1929db5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ee530f933e5196b7283708271f1e995056bc1cd65bd72708843b077493182182b6f7833f0a26ecf537f76c3428583c41ef6cd6084ecfc10b2724e925ea6379a9e90e078ba9de6d75b23c197ed905e6fe1a3a945d540d3a2b963a53aeaf4b3d1f61c5781145fbcd8dd19dde3e1509b4dc18ef0684625eca32c44f7a223307f8a6dddc39c6c4e405c26bf5f1be2c395c5fae23d900e0212f70db241c9c89a91364950997e92af943b2638dce3fad89aaba5c9f1839f67b4584f767e5a3a8e5823377c29c5d36d62d1c70ffe108a3eac1a0bc916e8a185ff219089e652662f4d6e288d4de9a2421baf803e55b8563ec133da0d5d546e641a94bbd81c81343ee232