jira.ihost.com

- IBM BTO BUSINESS CONSULTING SERVICES SP. Z O.O. -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 6b:97:5c:df:3e:64:2d:e5:b0:91:75:34:af:8e:e7:d8 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

IBM BTO BUSINESS CONSULTING SERVICES SP. Z O.O.

Organization: IBM BTO BUSINESS CONSULTING SERVICES SP. Z O.O.
State / Province: Malopolskie
Locality: Krakow
Country: PL

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:97:5c:df:3e:64:2d:e5:b0:91:75:34:af:8e:e7:d8
Serial Number (int): 143013316043497713941645805386499811288
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): e4:fd:c5:d1:e6:32:b7:e9:fd:ed:a3:12:88:33:34:bb:01:36:09:4e
Fingerprint (sha256): 14:34:5e:15:38:e5:dc:06:e1:2f:70:0f:c7:83:d2:2d:d9:40:be:1a:e2:32:7d:bc:6b:7f:a0:50:ba:55:cc:4b

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate jira.ihost.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jira.ihost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jira.ihost.com

Other certificates including the domain name ihost.com

(limited to 100 certificates)
test.claims.ihost.com
*.jz-dev.ihost.com
dbrmobile.fr2.usf.ihost.com
ipwc-sl.ihost.com
gsc.ihost.com
rtpwebvpn.brsrtp.ihost.com
test-watson2.ihost.com
masdev.monitor.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
ssl.wsc.ihost.com
survey.ihost.com
gsc.ihost.com
ehrkb.ihost.com
impactdev.rny.ihost.com
sldcmwas.gps.ihost.com
ista.ihost.com
www.reporting.ihost.com
smarthelp.ihost.com
www.elearning.jp.ihost.com
p2p.ihost.com
ciscovpn4.tl.ihost.com
p2p.ihost.com
ri3pa340.msd.ihost.com
ips.ihost.com
frfcqcm011ix328.montpellier.mebs.ihost.com
cpd-cp4waiops.apps.ocp-nw.p128.cesc.nca.ihost.com
vpn.bos.tec.ihost.com
*.jz-xit04.ihost.com
webvpna.brsrtp.ihost.com
*.gps.ihost.com
*.edu.ihost.com
maaccelerator.ihost.com
tvc.ihost.com
ista-preprod.ihost.com
aos.us.ihost.com
ista.ihost.com
help.dms.ihost.com
ctmwebbld1.msd.ihost.com
icafmtest.ihost.com
tyco.msd.ihost.com
survey2.ihost.com
impact-enterprise.rny.ihost.com
ips-preprod.ihost.com
axap1ph-web.msd.ihost.com
icafm.ihost.com
jira5.ihost.com
jiratest.ihost.com
chat.smarthelp.ihost.com
div16qp.fairfax.ihost.com
ista.ihost.com
*.edu.ihost.com
bld1vpn.brsbld.ihost.com
sni.cloudflaressl.com
stf1vpn.brsstf.ihost.com
*.cloud.red.ihost.com
ista-preprod.ihost.com
dev-process.vcfclaims.ihost.com
ehrkbpp.ihost.com
iconik-processor.apps.ocp4vam.p159.cesc.nca.ihost.com
watson-genomics.ihost.com
ptest.process.claims.ihost.com
etime.fairfax.ihost.com
*.gpsemea.ihost.com
www.as400lug.ihost.com
*.red.ihost.com
cisco.maaccelerator.ihost.com
etime.fairfax.ihost.com
test.rapid.ihost.com
*.lbps.ihost.com
haglobal-prod.red.ihost.com
*.red.ihost.com
*.edu.ihost.com
icafmdev.ihost.com
rchbcc.rochester.ihost.com
*.edu.ihost.com
vhost0532.dc1.on.ca.compute.ihost.com
masdev.home.industrial.apps.ocp4max.p152.cesc.nca.ihost.com
tracktrace.be.ihost.com
rchbcc.rochester.ihost.com
mbpstoolsdev.ihost.com
fsdctoyz-lab.bet.fiscnet.ihost.com
dadsweb4.uk.ihost.com
asa003b.centers.ihost.com
prod.rapid.ihost.com
w.maaccelerator.ihost.com
citrix.ehr.ihost.com
quickplace.fr2.usf.ihost.com
watson.ihost.com
jira4.ihost.com
clarify.bto.ihost.com
travelexpense.eu.kfi.iers.ihost.com
testimpact.rny.ihost.com
matraining.accelerator.ihost.com
jira.ihost.com
*.tec.ch.usf.ihost.com
sonoco.iers.ihost.com
matraining.accelerator.ihost.com
gnm.sni.ibm.com
aos.us.ihost.com
stats.surfaid.ihost.com
prod.rapid.ihost.com

Certificate

The complete raw certificate details for jira.ihost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tW40a96gUsdIkTRWIlT
jbfG9o0H2n/prXrrGbZGcUIC8MpcP1Ng7eg0HpGd6OlLz/ojfWzsuGjnk8hbgxXr
RR3hH9BlfBnLp++gK6612ETviay4ptCbq1DXER6uyxp/fRMP2mnwHXI5dvh62Vun
C2AbDlpGHNFfeofJDeyyYOT2NzG48NmS4j91ATGw1kE25q9D6mVA5nheKhz69niZ
1pvqZl02+9NGh6UVTmvUX85l5pH7PPa+dhMuXQCrVhrK7WfDXiCWoWMLL5ty4kLp
rx+lNq2eIvoSxhFyAhxpt11U3Gh7uoY9i6Qp2wXuhjI8BKS91/r9H7K9Qnkf4Pov
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143013316043497713941645805386499811288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Krakow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IBM BTO BUSINESS CONSULTING SERVICES SP. Z O.O.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'jira.ihost.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Malopolskie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30655060023054780651550222430690555311155702454142507541997475209758615570240925152630532066831195648307047529249565798595556737752682428157467060673801139345175644452944262988030214974362093542203105453450498442704182555886040976632442186758344599494859164701660647397738668493369864779673779885195681394264598225153136802262217803943117579544950120171571551094414001956546590861677162266179741303263177542508546680802261911493964942851795120184179876675587571076082132248825399125783391007357784804439089825096698051964133423296615549429554233297713931377014563641443491017057503685445886752234827727795529193238381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.ihost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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