login.iam.accaglobal.com

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:e9:05:c3:28:52:21:a9:67:0e:e4:b8:92:ee:aa:08 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:e9:05:c3:28:52:21:a9:67:0e:e4:b8:92:ee:aa:08
Serial Number (int): 13172974004121257506561829478052309512
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:09:a0:c4:d2:15:0f:d4:b8:65:10:42:25:2f:c5:07:33:19:db:34
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4c:a1:b9:f3:62:9f:fb:52:1d:7c:0d:65:66:80:29:06:0a:36:3b:44
Fingerprint (sha256): 14:fc:e5:76:4a:77:44:11:b4:05:0c:10:94:57:a0:6b:ab:c2:6c:8b:b1:a2:b1:d7:b6:db:d4:3f:7e:8a:b2:77

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate login.iam.accaglobal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.iam.accaglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.iam.accaglobal.com

Other certificates including the domain name accaglobal.com

(limited to 100 certificates)
www.pugpig.com
learningcommunity.accaglobal.com
rp01.accaglobal.com
dns-vetting1m.map.fastly.net
oat.soa.apps.accaglobal.com
practicetests.accaglobal.com
sso.accaglobal.com
council.accaglobal.com
accaglobal.com
www3.pugpig.com
portal.accaglobal.com
interview.accaglobal.com
abafrica.accaglobal.com
www.pugpig.com
www.pugpig.com
citrix.accaglobal.com
int.internal.exams.apps.accaglobal.com
soa.apps.accaglobal.com
events.accaglobal.com
soa.apps.accaglobal.com
tls.automattic.com
cbedr4.accaglobal.com
studygroups.accaglobal.com
owa.my.accaglobal.com
sso.accaglobal.com
interview.accaglobal.com
haproxy01a.prod01.iam.accaglobal.com
dns-vetting1k.map.fastly.net
studentvirtuallearn.accaglobal.com
tls.automattic.com
experience.accaglobal.com
api.cn.stage.accaglobal.com
dns-vetting1m.map.fastly.net
syscbe.accaglobal.com
cbe.accaglobal.com
uat-sec.soa.apps.accaglobal.com
cbe.accaglobal.com
studymaterials.accaglobal.com
dns-vetting1m.map.fastly.net
www.pugpig.com
www.pugpig.com
int.soa.apps.accaglobal.com
study-in-singapore.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
*.content.pugpig-dev.com
dns-vetting1m.map.fastly.net
tls.automattic.com
sys.reportengine.exams.apps.accaglobal.com
accaglobal.com
haproxy01a.oat01.iam.accaglobal.com
dns-vetting1m.map.fastly.net
Oatcbelicensing.accaglobal.com
cds3.cvent.com
uatcbe.accaglobal.com
tls.automattic.com
irelandbookings.accaglobal.com
login.ciam.accaglobal.com
int-sec.soa.apps.accaglobal.com
www.accacareers.com
aem-sso.accaglobal.com
studentvirtuallearn.accaglobal.com
practicetests.accaglobal.com
tls.automattic.com
www.pugpig.com
dns-vetting1m.map.fastly.net
council.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
pv-test.accaglobal.com
interview.accaglobal.com
*.iassess.accaglobal.com
accaglobal.com
www.pugpig.com
totalreward-system.accaglobal.com
dns-vetting1k.map.fastly.net
adfs.accaglobal.com
uat.exams.apps.accaglobal.com
dns-vetting1m.map.fastly.net
devcbe.accaglobal.com
exams.apps.accaglobal.com
uat-wssop.iam.accaglobal.com
diploma.accaglobal.com
*.content.pugpig-dev.com
oat.bi.apps.accaglobal.com
learningcommunity.accaglobal.com
tls.automattic.com
sys.ext.exams.apps.accaglobal.com
login.iam.accaglobal.com
www2.pugpig.com
www.pugpig.com
cbept.accaglobal.com
alljobs.accaglobal.com
dns-vetting1m.map.fastly.net
int.exams.apps.accaglobal.com
digitalhub.accaglobal.com
diploma.accaglobal.com
cds3.cvent.com
int.reportengine.exams.apps.accaglobal.com
soa-uat.accaglobal.com
studygroups.accaglobal.com
*.iassess.accaglobal.com

Certificate

The complete raw certificate details for login.iam.accaglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUbyOzxYbrbBA5bfs8v6
FRNth6+iW7nsYsCitjeNbt2MTaXBdtcI+aich3n+BTzd/ssG2xzoEUoWq5ehv5Wk
5N2RE9e4cF0QLQOZuD8PeAGqvu1vfXpZMPaGs2doZh3LLqKm87ucpzdkrzJXmHK4
2Wf4USev1eHyWGJoEcaei/CqFLgBmriB6mvT+uZsUeOumY08hupOvSGBqUfzW5Ge
0tFLU2DG30/81w4+2veEifHO79sKYasuQIpCqnVQOQyapPQYApRjgo0tYebYLw0f
uuaQ26kjKt84nSyZTY5mEEJIKnlW0oyBpaKg/1SX9sfR+TkF8bnS6RQtoYtp5u4X
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13172974004121257506561829478052309512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.iam.accaglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21874211642322384888950227521677865095557863787079624805687904568818801237041175305080893976253425827110525949117004832104401489160537968264853190211257322901161445036364586096469372138434176599088227856140337292884929518218256029810764576465750420470417224236554330430276763449759291440248811433232479925620030915534375491666137947217842625571698984545471473259888642401062145117775873676826062561449290479867798088663708882461010960277614860171221056018867194228656847896832549983507062573372799431840696319549690336307332580512771142278937436638620444397995582911436393978147882448197217557409637586023439013910481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9609a0c4d2150fd4b8651042252fc5073319db34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.iam.accaglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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