globalarch.mhi.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0f:94:81:48:a2:3e:99:3c:a5:84:0e:9d:ac:e3:31:4d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=globalarch.mhi.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:94:81:48:a2:3e:99:3c:a5:84:0e:9d:ac:e3:31:4d
Serial Number (int): 20709502057315713307773820695604310349
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:19:62:93:b5:0d:15:b4:01:cd:a9:40:a9:40:ee:c1:92:cc:75:98
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): 8e:83:4e:cc:72:e1:32:ca:f4:56:48:1c:e2:63:f2:61:15:1b:32:fc
Fingerprint (sha256): 16:2b:f9:9b:00:35:d1:3f:be:8c:5f:03:7c:9f:87:e4:a5:3c:4c:33:ce:e4:ed:d2:05:b0:ba:03:f9:4d:04:00

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate globalarch.mhi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globalarch.mhi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globalarch.mhi.com

Other certificates including the domain name mhi.com

(limited to 100 certificates)
vmware-staging.ideacloud.com
ap.power.mhi.com
ember-utils-react-staging.staffshift.com
sni.cloudflaressl.com
*.mhi-dev.mhi.com
sni.cloudflaressl.com
globalarch.mhi.com
sni.cloudflaressl.com
*.spectra.mhi.com
sni.cloudflaressl.com
www.indianjobs.ga
audiolibros.geke.com.ar
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ap.power.mhi.com
www.mhi.com
sni.cloudflaressl.com
newenergy.mhi.com
global.power.mhi.com
engine-genset.mhi.com
engine-genset.mhi.com
globalarch.mhi.com
lp.go.mhi.com
www.amaisbelezaesaude.com.br
globalarch.mhi.com
sni.cloudflaressl.com
global.power.mhi.com
newenergy.mhi.com
*.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
babybump.reidiculous.com
sni.cloudflaressl.com
*.spectra.mhi.com
engine-genset.mhi.com
ssl385776.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
engine-genset.mhi.com
ssl385777.cloudflaressl.com
www.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ap.power.mhi.com
ecoenergie.com.br
mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
newenergy.mhi.com
app.go.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
leichtgewicht.at
ssl385776.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.amaisbelezaesaude.com.br
sni.cloudflaressl.com
sni.cloudflaressl.com
go.mhi.com
sni.cloudflaressl.com
globalarch.mhi.com
ww.massage.org
spectra.mhi.com
superbowl.anintec.com
etm.mhi.com
*.mhi-dev.mhi.com
*.spectra.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
htsa-ex.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stg01.spectra.mhi.com
ssl385777.cloudflaressl.com
*.mhi-dev.mhi.com
ceraweek.mhi.com
images.go.mhi.com
sni.cloudflaressl.com
spectra.mhi.com
mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
images.go.mhi.com
ssl385777.cloudflaressl.com
globalarch.mhi.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl385776.cloudflaressl.com
faq.mhi.com
go.mhi.com
*.mhi.com
htsa-ex.mhi.com

Certificate

The complete raw certificate details for globalarch.mhi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4LKfgMi6jtu9aZOboUA
iYKQEy1dTr+KLRldhpeTdeS6c53yFP5k3H5bC2Jc32eLP5G5vlyPr2pSduulkRLQ
B9dS/A4MHElZca97fj11ywKjY95DN+GAIrZHzM8Z0Z9DbwyBNkh2KcVcMaqL1mzE
tECP+xCmrkQfbwQbg0hM6d6GD/c5KUtfL1NZ1g3cXLFBD88VzB0AI3ix0ARIAxA3
47psgDeb+aRa/YE2iOfqZYs4uxjptRQsDPt9yW7V92u+acPv9wjLUNUzfbU7SseN
A9dFRD4eM1QCOUTHwnDVpftSjnkX0ec/FIPTpdxWlAAJGiLxMTDwmHqbSGxiYqF4
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20709502057315713307773820695604310349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globalarch.mhi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24176011687143764619028696660794279612919661198070054536984195493055153925328502586292895898075457828037341486966046018245924430884548185917916319416522473902899715177042757335912412288450471325757638214505993462734180381294699202364790277729784896517023970009571429862398255008608992151225750495272446289926445544530129928341578497047334991281873877495660333154302266660464309139415665677497396450341924727420778288374552070339320184354927238184096398060527376026124417606992109633649763589997004586662084139056203105874752591075083517589402413771235579144574993806500546173809553494103173809401924819890746236696703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c196293b50d15b401cda940a940eec192cc7598
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalarch.mhi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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