alle-operation-reporting-portal-production.anz.allegion.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:b2:18:f8:6e:c6:f9:26:74:83:5c:fd:e0:88:10:93 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alle-operation-reporting-portal-production.anz.allegion.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:b2:18:f8:6e:c6:f9:26:74:83:5c:fd:e0:88:10:93
Serial Number (int): 2253963297302801339685953194563211411
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6f:ef:40:b9:8d:f6:0c:2f:a2:0f:35:fd:b6:3c:ae:da:b8:aa:9e:bc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): a7:c3:0e:fe:83:2c:cd:00:74:a1:7b:4c:f2:6f:6d:ea:63:02:cf:c2
Fingerprint (sha256): 13:8f:1f:06:36:13:b3:85:11:cf:74:ce:80:45:d9:5a:25:5a:4d:ff:a5:b3:c7:8c:e0:13:28:af:87:10:f0:6a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate alle-operation-reporting-portal-production.anz.allegion.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alle-operation-reporting-portal-production.anz.allegion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alle-operation-reporting-portal-production.anz.allegion.com

Other certificates including the domain name allegion.com

(limited to 100 certificates)
status.pipeimob.com.br
ordermanagement-api-uat.allegion.com
support.overtur.allegion.com
el-api-svc-prd.allegion.com
hrassignment-api-dev.allegion.com
el-api-svc-prd.allegion.com
overturkeying-api-uat.allegion.com
smetrics.allegion.com
status.markiiieb.com
discover-overtur.allegion.com
alm-uat.allegion.com
ind-av-veeam1.allegion.com
procom.allegion.com
cisasmartaccess.allegion.com
ivroderstatus-api-dev.allegion.com
ordermanagement-el-qa.allegion.com
overtur-uat.allegion.com
status.ngxnetworks.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
merlin-test.allegion.com
afdverify.beta-reporting.allegion.com
iq.syncd.tech
ind-av-ignition.allegion.com
as2test.allegion.com
ordermanagement-qa.allegion.com
startsmart.allegion.com
overtur-reports-api-qa.allegion.com
algchi-gm-ib-am.allegion.com
kc-test.allegion.com
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
www.allegion.com
shw.rmt.status.descartes.com
overtur.allegion.com
alle-despatch-lane-manager-printer-prod.anz.allegion.com
status.quarklink.io
omk-uat.allegion.com
orderentryapi.allegion.com
startsmart.allegion.com
status.5starcoms.net
alm-dev.allegion.com
beta-planviewer.allegion.com
prn-av-opct1.allegion.com
m3uid01.allegion.com
overtur-sandbox-el.allegion.com
soca.allegion.com
shw.rmt.status.descartes.com
feedback.allegion.com
status.anywhere.asolvi.app
overturstatus.allegion.com
cmg.allegion.com
dev-cisasmartaccess.allegion.com
chicago2.allegion.com
www.allegion.com
www.allegion.com
support.overtur.allegion.com
apollo-fw-docs.allegion.com
emeia.allegion.com
www.fshlocking.com.au
accessmgmt-test.allegion.com
overturkeying-api-qa.allegion.com
c360.allegion.com
level4.allegion.com
discover-overtur.allegion.com
status.mapworks.io
americas.allegion.com
www.allegion.com
notifications-dev.allegion.com
accessmgmt-dev.allegion.com
startsmart.allegion.com
shw.rmt.status.descartes.com
notifications-qa.allegion.com
hrassignment-dev.allegion.com
status.pipeimob.com.br
status.doccle.be
mcprod.macle.bricard.com
status.lenderdock.com
shw.rmt.status.descartes.com
m3bed01.allegion.com
vip.allegion.com
www.allegion.com
alle-identity-api.allegion.com
chicago2.allegion.com
soca.allegion.com
ivroderstatus-api-dev.allegion.com
beta-reporting.allegion.com
cisasmartaccess.allegion.com
tooling.allegion.com
beta-history.allegion.com
shw.rmt.status.descartes.com
colwvwcappt1.allegion.com
iq.syncd.tech
alle-operation-reporting-portal-production.anz.allegion.com
ordermanagement.allegion.com
sni22ce5gl.wpc.edgecastcdn.net
ivroderstatus-api-dev.allegion.com
level4.allegion.com
soca-dev.allegion.com
support.overtur.allegion.com

Certificate

The complete raw certificate details for alle-operation-reporting-portal-production.anz.allegion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DhErTpQ/hl/pg64vTNm
Z+Qi1xrqpk5pGagwpVj1v75Zegz391DrIVJqQcibxgI+mP1MBoPT/VElp9fi8fiV
Mkztf7xxGUSwq5/9RA4Gb0u0ZGHGw/qKBB224ykIioxIeNFb+1limZ+FHPuy1eA2
PoeL7DFP4hepfMAgiklj8wPnA8nzkR9dGoGHq9YtMbO2opuCzeawXKAzYY7vjOtK
4A8IDPbeqov+gs0b6w+WicEQD7bqoezO6/fTXvLgRrhid1TxgfRG4OLUAMd+i0Ej
+eY4fLrOGM4MnJtUw09D0jP/LfeX6Kp/XKs4AriRpaim3CSpfh9yDsVhVVO5w+tr
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2253963297302801339685953194563211411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alle-operation-reporting-portal-production.anz.allegion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28810080449475449565690078038906971090071666322517845857586859871394877099773666699809097899093884620425061893145309627067665047017589907686415750742664131638263292073498471406699327632170496255721709438986460000680541666296577387606732024624539921038242272020528003767308913572864389339929142706595701871861342253908267294437185950695577348112379905799210761766377541822966226352968550948405749371437289406661488740361676147292182307936112626804132953748107059695735338239713577453902563799621501618306255383000117544484594959654173692106420019778641405785148163163506703670080493735372612190602708866434602533350181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fef40b98df60c2fa20f35fdb63caedab8aa9ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alle-operation-reporting-portal-production.anz.allegion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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