deals-dev.keurig.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:f9:fe:3a:b5:85:05:05:cb:a4:d2:a2:fd:07:98:d0 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=deals-dev.keurig.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:f9:fe:3a:b5:85:05:05:cb:a4:d2:a2:fd:07:98:d0
Serial Number (int): 3956494292795354807343393653458966736
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 05:db:98:6e:0f:71:43:52:c9:6f:f0:10:f4:e8:b1:81:f2:37:bb:f7
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6b:b8:c2:e2:18:35:48:73:f6:e9:ff:93:da:d4:5b:49:27:92:1a:d6
Fingerprint (sha256): 16:3e:a2:9c:0a:95:8b:5c:04:92:0b:4b:33:00:93:51:00:63:79:7c:f8:b3:2e:fa:5e:1d:75:ae:60:67:e4:4f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate deals-dev.keurig.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deals-dev.keurig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deals-dev.keurig.com

Other certificates including the domain name keurig.com

(limited to 100 certificates)
www.greenmountaincoffee.com
surprise.keurig.com
www.greenmountaincoffee.com
oa.gmcr.com
sign.oakslab.com
www.mykeurig.com
www.greenmountaincoffee.com
www.kevinhcross.dev
cdp-krgdevapp.keurig.com
www.tvattkalendern.app
test-jira.keurig.com
www.harshchandra.com
reg-testing.keurig.com
www.keurig.com
www.mykeurig.com
www.jahnavitapes.in
*.keurig.com
fs.keurig.com
www.greenmountaincoffee.com
login-perf.keurig.com
neuron-uat.keurig.com
login.keurig.com
transfer.keurig.com
login-dev.keurig.com
gmcruccx1-ms.keurig.com
www.gmcr.com
leads.commercial.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
rds.keurig.com
fs2.keurig.com
www.keurig.com
hibody.app
forum.isthmus.com
*.iot.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
www.mykeurig.com
login.keurig.com
login.neuron.keurig.com
www.gmcr.com
*.keurig.com
www.keurig.com
redacaoomega.com.br
www.harshchandra.com
GMCRPUB-ms.gmcr.com
www.keurig.com
leads.commercial.keurig.com
mtl-token.keurig.com
login.neuron-uat.keurig.com
service.dhanvarsha.co
email-preferences.keurig.com
login.neuron-uat.keurig.com
login.neuron-uat.keurig.com
nexus-qa.keurig.com
crowd.keurig.com
www.keurig.com
gmcrvcse.gmcr.com
gmcruccx1-EC-ms.keurig.com
gmcrvcsc.gmcr.com
login-ist3.keurig.com
email-preferences.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
*.neuron-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.yasinseemeshine.com
app.fusionsushi.es
www.greenmountaincoffee.com
GMCRCUP.gmcr.com
sblqa2.keurig.com
jira.keurig.com
mikmak.keurig.com
webmail.gmcr.com
www.mykeurig.com
game.jinro.chat
www.mykeurig.com
upload.neuron.keurig.com
coreserver.keurig.com
deals-dev.keurig.com
kconnect-dev.keurig.com
dev-login.neuron-dev.keurig.com
www.keurig.com
login.keurig.com
dev-auth.neuron-dev.keurig.com
www.greenmountaincoffee.com
confluence.keurig.com
bevpod-prod.keurig.com
agency.umrahmarket.com
peopledev.keurig.com
*.keurig.com
csrm.keurig.com
brewer.neuron.keurig.com
transfer.keurig.com
bevpod-otest.keurig.com
login.keurig.com
gmcrvcse.gmcr.com
www.2alan.com
game.braille.hadley.edu

Certificate

The complete raw certificate details for deals-dev.keurig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5YG8oflenno3Ubxxi3
Yz2LRqBkONHkkBOpR9mA1kC29aF0ZCuiLTCfss5hNp4MKTgo6A3dwz7pfyUuxjvs
WUlg4KK6NvZ6g7sC490vd49PzBMATL+i/Z6Rpu1nnsNcz7pSwToft+IvKCCo0IZr
hWyjwfL+IXGDcQYr/eMdGnn1T1GnVezxp7IjlXNGGmm/nJacljB1M3iuMvMrQBt2
4BbWwmtymsplFDuBssGso+H5r2xiIk71GsMCNyByprHRQhwkWZQYYlq0dt9LfNkx
ESW/W/MThlWQ1lt3/SpGNvR7cSZbLqYkk/7iSda22xXN1Qzj/heT0aoaCrsAb/Zx
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3956494292795354807343393653458966736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deals-dev.keurig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24907579030399949675172074572233557500119931987622729246799426609042462247293348546831061550982162007713445293271775885243521922209807589347027868658557193972242345662388018015870582921691212627289519145796064485388997013490760352448216482995940573112613498791564521935021598256844323552027867572574757429701862437139412129239034269431737172144987464637790277632431075915959757388942205857750737220505588009765302128942013029004827113124629486317897589824287126914014047252885433139213165430871957027379946947861445957242032977656408119936665688789168160362945668486086412338784461125125312267341378870874802522321357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05db986e0f714352c96ff010f4e8b181f237bbf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals-dev.keurig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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