*.holcim.com

Issued by COMODO SSL CA

About this certificate

This digital certificate with serial number 8e:a2:a2:39:60:c2:d9:0e:df:bd:1e:51:72:db:fa:33 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.holcim.com,OU=Domain Control Validated+OU=Issued through Holcim IP Ltd E-PKI Manager+OU=COMODO SSL Wildcard

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:a2:a2:39:60:c2:d9:0e:df:bd:1e:51:72:db:fa:33
Serial Number (int): 189594817788847868491596105230497610291
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e7:4d:23:a4:20:20:93:74:38:a3:2e:56:e0:bd:b1:f8:2d:55:cb:90
AuthorityKeyId: 1b:6b:bd:1f:8a:49:18:94:54:37:55:b4:20:17:ed:37:b9:77:18:7d

Fingerprint (sha1): 2e:2c:2b:8e:cf:87:dc:ea:4a:21:9b:2d:a7:1c:52:3e:a1:6f:f7:d3
Fingerprint (sha256): 17:42:08:25:21:37:13:7f:93:3f:4d:61:78:5a:99:b3:3f:56:e6:65:d1:54:a3:8e:ae:eb:aa:21:76:67:38:60

Issuing Certificate URL: http://crt.comodoca.com/COMODOSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOSSLCA.crl

Check the revocation status for certificate *.holcim.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.holcim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.holcim.com
holcim.com

Other certificates including the domain name holcim.com

(limited to 100 certificates)
teamplace-qa.holcim.com
lp2-logon.holcim.com
*.hgrs.holcim.com
servicedesk.ap.holcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
aop.ap.holcim.com
iDispo-phl.ap.holcim.com
hronline.ap.holcim.com
trilogy.ap.holcim.com
stars-uat.ap.holcim.com
portal-qas.ap.holcim.com
brandportal.lafargeholcim.com
bwreport-poc.ap.holcim.com
crl-dev.privasphere.com
hronline-qas.ap.holcim.com
web-qa.hgrs.holcim.com
qlikview.ap.holcim.com
*.holcim.com
vd.hgrs.holcim.com
*.holcim.com
lp1-logon.holcim.com
stars.ap.holcim.com
*.hgrs.holcim.com
webvpn.holcim.com
esales.ap.holcim.com
*.hgrs.holcim.com
*.holcim.com
apbm.ap.holcim.com
portal-qas.ap.holcim.com
www.privasphere.com
*.analytics.hgrs.holcim.com
orf-poc.ap.holcim.com
Loyalty.ap.holcim.com
centennial-qa.holcim.com
*.holcim.com
*.hgrs.holcim.com
lq0-logon.holcim.com
awconsole.holcim.com
portal-poc.ap.holcim.com
vd.hgrs.holcim.com
dwa.hgrs.holcim.com
integrityline.holcim.com
loyalty-uat.ap.holcim.com
srm-qas.ap.holcim.com
mobilebi-cco.hgrs.holcim.com
trilogy.ap.holcim.com
hronline-qas.ap.holcim.com
cbs.holcim.com
awconsole.holcim.com
gw01hgrs.holcim.com
www.privasphere.com
stars.ap.holcim.com
cco.holcim.com
qa.holcim.com
websurvey.ap.holcim.com
bwreport-qas.ap.holcim.com
teamplace.holcim.com
webvpn.holcim.com
ecc-qas.ap.holcim.com
citrixphl.ap.holcim.com
hcm-qa.hgrs.holcim.com
emea-srmqimp.holcim.com
mobile.ap.holcim.com
emea-srmqbrt.holcim.com
dwa-qa.hgrs.holcim.com
bwreport-dev.ap.holcim.com
apbm.ap.holcim.com
bi.ap.holcim.com
orf-dev.ap.holcim.com
mdm.holcim.com
webvpn.holcim.com
workflow.ap.holcim.com
qvweb-dev.analytics.hgrs.holcim.com
integrity.lafargeholcim.com
www.privasphere.com
video.holcim.com
portal-qa.holcim.com
orf-dev.ap.holcim.com
maps.analytics.hgrs.holcim.com
global-workflow-dev.holcim.com
hcm.hgrs.holcim.com
crl-dev.privasphere.com
portal-dev.ap.holcim.com
*.hgrs.holcim.com
tmc.holcim.com
versand.ea.holcim.com
brandportal.lafargeholcim.com
bi-qa.hgrs.holcim.com
*.holcim.com
lj1-logon.holcim.com
stars-uat.ap.holcim.com
orf.ap.holcim.com
guesthgrs.hgrs.holcim.com
srm-qas.ap.holcim.com
logon.holcim.com
easybuild.holcim.com
*.holcim.com
appstore.ap.holcim.com
mobile.ap.holcim.com

Certificate

The complete raw certificate details for *.holcim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowvu2J3qchfxTkmS9mF1
kDS4tDaz+T9Dy/uoR111ZziVwqrDtweJUAW+3r5yFbVsn/DqKT/j/lMCG0lH4W54
1i0YlifOaKQiiLSjVRS6YbzQTDG/BJFWVO9R1vlTIBtI5ywjXgx6xKECPGwlOqYb
xBXvHbuLaj6bIuv5lW/GBY5BpzCVHQZK1geldHCxFA3OaiPYrUAMOuuquedlJsbX
j6xgGjTrjy/rMJ9+CMiOc6n2bAmklLeoOzcypCEsHb7NL9JQpB+X5ay6XjnsPpFF
3MmmMMpUftJqzJRseUH9+LkJU3SfrEEDOyOQKu65LhfqzEhsPmMvypiwKrBRYWks
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189594817788847868491596105230497610291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Holcim IP Ltd E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.holcim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20582728087536410325262107002959230953124511544238866869816491357820161315395646918290733729920579564046346276146367542635256531047759232143713003851916838711599156521532908342477977486886908183245827117938227614249750380414401803360291467426174320661694269956759527293593511243092306513858448753825754297798215053996046088296529236215623309253511096319592333420231023580145418438478612470492867897627159475492802317450871302099668422078702930114935470175728158580900406584569533426335992315280643772937266588611461269280084943612080718513198928620108180996502706161353996004510450810522442047972094992089191488761051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1b6bbd1f8a491894543755b42017ed37b977187d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e74d23a42020937438a32e56e0bdb1f82d55cb90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holcim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holcim.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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