*.OnePLM.com

- OnePLM Limited -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:13:f8:cb:04:df:a7:09:82:cc:d2:d6:7b:69:50:2b was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OnePLM Limited

Organization: OnePLM Limited
Locality: Witney
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:f8:cb:04:df:a7:09:82:cc:d2:d6:7b:69:50:2b
Serial Number (int): 4091383750073924661287089432647258155
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d5:e5:c5:c6:9b:3d:c0:f0:fe:74:5b:1d:76:25:42:07:38:26:df:10
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 19:0a:ba:45:10:91:02:55:16:ff:ff:15:6a:aa:c6:a7:13:5e:c9:6b
Fingerprint (sha256): 1f:f3:11:5a:9b:4c:70:77:fd:fa:83:9a:12:7a:cc:e7:ac:5a:31:79:3d:af:85:b6:74:4c:75:1c:78:99:d7:16

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.OnePLM.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.OnePLM.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.OnePLM.com
OnePLM.com
voip.oneplm.com

Other certificates including the domain name OnePLM.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.OnePLM.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4091383750073924661287089432647258155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Witney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OnePLM Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.OnePLM.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636969435524054752147361614413167769136033988697277227672797498307051630988518972109483322526485500540597341311280260620459184024831490150339930504161008670238527970120558816230768184597232209352232132742347940900309566351371600542868990040917354797360519575624384293789507478546803147427824182013596981724791394102279183629360959984034314838849891355723602933894831430561290234549940682175952669108173340078411037721970871136638137832802401700352859871331098052796472843615273716959644382691356849851419395769725981436654498477965486429036423243679657304200458275046118147377747024787637755925660302567582977677632229472971301838623015697777872747146560112273973196835512748539487193760374602326763527531181687191361516903160021184278476551606695359020900806542816176870308371420647094418926787603584714517839224106309714079773840288251181941893633239323527460259314529059552803470240657125443992556518243936586660014448232319877626194474768380499889255177449028812247798120567209899769165554329653717376792382506725617966985360343344154125092985150645850268689894302755008832880783088595255362460783811111252854427662841245983649436314835335657265811017131952181969291596673550744670436037810423580048456651414966579814605721512929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5e5c5c69b3dc0f0fe745b1d762542073826df10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.OnePLM.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'OnePLM.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voip.oneplm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001879100cc670000040300483046022100f55d4f2a10af22176d143a7d1cc029759732d9f77520567795e6764b4b45600802210081d9702332b8828da90203893b1a4c37272bf6fb947825eb8e7666919417bcd400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001879100cc9c0000040300483046022100d1878fec1194361eb29a540827b71d3d32084eacce510dfaf1d44e2ab2b0c816022100923b5276743ec14ddf66e1408bfe74c16a2ad15138af324e1f2cdad84ad8a730007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001879100ccdf0000040300473045022100b6e91fb712e96297ee9139c3521acc83d68178d229385c4aa65bbe21aed25a7d02200595a432cdd84062f204feebc14715be09d5b6caf9b158c92d2d47b7587bd353
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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