promoshop.bakerhughes.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0c:28:33:16:bd:92:00:02:17:78:1e:de:e2:d4:99:11:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=promoshop.bakerhughes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:28:33:16:bd:92:00:02:17:78:1e:de:e2:d4:99:11:3c
Serial Number (int): 352585966518295748876025589829123297579324
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:44:fa:14:31:9d:8f:19:ef:2e:13:3e:81:66:30:02:e3:2b:85:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:85:2a:55:99:4a:a4:d9:9c:57:57:4b:70:f2:95:b6:66:e2:80:6f
Fingerprint (sha256): 13:b2:1f:54:e0:e1:58:67:14:91:e3:83:02:8c:ff:97:e3:e9:5a:49:90:4e:f2:a8:c5:0c:54:28:03:8a:cb:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate promoshop.bakerhughes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for promoshop.bakerhughes.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

promoshop.bakerhughes.com

Other certificates including the domain name bakerhughes.com

(limited to 100 certificates)
wlrtwh.welllink.bakerhughes.com
designsystem.bakerhughes.com
altlogin.bakerhughes.com
federation.bakerhughes.com
*.pa.bhc1.bakerhughes.com
rdsftp-wh.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
webapps.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
waygate-tech.com
sandlro.bakerhughes.com
gwdev.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
iwa-sso.bakerhughes.com
sealytics.welllink.bakerhughes.com
qa-wlrt.welllink.bakerhughes.com
bhvpn.bakerhughes.com
bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
azure-firewall.azure.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
dxcrss-oaghosted-header.bakerhughes.com
wlrtstg.atc.welllink.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
bhazjvnp.bakerhughes.com
star.eu01.bakerhughes.com
wlrtsgn.welllink.bakerhughes.com
qa-edmdote.bakerhughes.com
wmb2bprod.bakerhughes.com
prodml.productionlink.kul.bakerhughes.com
sbe3.bakerhughes.com
wlrt.welllink.bakerhughes.com
sbc1.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
otp-houston.bakerhughes.com
sappohttpsprod.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
na.vpn.bakerhughes.com
sbe3.bakerhughes.com
ros.sit.bakerhughes.com
productionlink.jkt.bakerhughes.com
navcsexpress3.ent.bhicorp.com
leapfrog-ssl-22.gcs-web.com
sbe3.bakerhughes.com
rdsftp-wh.bakerhughes.com
myid.bakerhughes.com
lswebext.bakerhughes.com
witsml.welllinksolutions.pek.bakerhughes.com
*.npa.bhc1.bakerhughes.com
imperva.com
*.bakerhughes.com
www.bakerhughesds.com
leapfrog-ssl-20.gcs-web.com
dam.bakerhughes.com
waygate-tech.com
ros.bakerhughes.com
us.ecomad.connect.bakerhughes.com
imperva.com
hse-security-course.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-22.gcs-web.com
us.connect.bakerhughes.com
micromegas.com
measurementandcontrols.com
prodml.ambit.test.bakerhughes.com
wlwtmb.welllink.bakerhughes.com
wlrt.rtsc.welllink.bakerhughes.com
wlrt.welllink.bakerhughes.com
bakerhughes.com
gwdev.bakerhughes.com
*.rod.bakerhughes.com
federation.bakerhughes.com
productionlink.mias.bakerhughes.com
sip.bakerhughes.com
orbis.ips.test.bakerhughes.com
sip.bakerhughes.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-20.gcs-web.com
sip.bakerhughes.com
wlrtwh.welllink.bakerhughes.com
wlw.pek.welllink.bakerhughes.com
ambit.bakerhughes.com
federate.tmb.bakerhughes.com
wlrtglb.dlr.welllink.bakerhughes.com
qa-federate.welllink.bakerhughes.com
bakerhughescmg.bakerhughes.com
rdsftp-eh.bakerhughes.com
qa.connect.bakerhughes.com
promoshop.bakerhughes.com
federation.bakerhughes.com
ros.sit.bakerhughes.com
leapfrog-ssl-22.gcs-web.com
corpsts.bakerhughes.com
wlwitsml.stg.welllink.bakerhughes.com
bhazjvnp.bakerhughes.com
wlwitsml.ha1.welllink.bakerhughes.com
bes.dev.welllink.bakerhughes.com
welllinksolutions.rtsc.bakerhughes.com
webapps.bakerhughes.com
bakerhughesds.com

Certificate

The complete raw certificate details for promoshop.bakerhughes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352585966518295748876025589829123297579324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-18 14:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 14:56:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'promoshop.bakerhughes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3914929580025220598787850961495351953365808120181221480281915312022460108897228158655675231568397201494272665289506503175824507431044484072993088826452667903930253896407281202124043437595125578526858827817433166212676889056528076820915521072201876838278635090022857341836124234151712636898347733894190887138538931680311189356834104886128880655137881344160094046121674257258729318657914381617827999740499532972546358279358163063962161901528088170996878766730806345828351090079903572832316559155093800418550498379020269027871358334170364895280306373363531520005525029126927203235045661282241992504830574943537208640181254762686698851840436292672628234502791279374640113643941637602532216721675109816525597939624770219693036829003506805165649965418682124595868137943966399715666088501675128036935915865112619823247373847641890886408489317264952839389028117757289612290175611767113195327405379411713257507692285261608460736783021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a844fa14319d8f19ef2e133e81663002e32b853c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoshop.bakerhughes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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