ims-prod04.adobelogin.com

- Adobe Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:03:29:e2:20:c4:83:49:c6:6c:a5:1f:b8:0f:cb:7a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Adobe Inc.

Organization: Adobe Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:03:29:e2:20:c4:83:49:c6:6c:a5:1f:b8:0f:cb:7a
Serial Number (int): 1345654380860088063864143821904268154
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 1b:12:09:bc:da:9f:99:95:6d:fb:19:d3:c6:36:98:b1:73:36:fb:20
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b1:47:af:6c:c4:ce:28:79:29:e4:46:00:45:ba:48:37:4e:71:85:e3
Fingerprint (sha256): 20:12:af:2f:7e:05:f1:4d:ae:d2:18:ca:54:f2:8c:8f:bc:1d:b3:a0:79:a5:dc:db:b7:32:d9:5c:2b:9c:76:f6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ims-prod04.adobelogin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ims-prod04.adobelogin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ims-prod04.adobelogin.com

Other certificates including the domain name adobelogin.com

(limited to 100 certificates)
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1-stg1.adobelogin.com
*.adobelogin.com
*.ims-dev3.adobelogin.com
*.adobelogin.com
monitoring.stage.adobelogin.com
monitoring-va6.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
*.dev.adobelogin.com
na1r-dev1.services.adobe.com
ims-na1.adobelogin.com
*.services.adobe.com
static-stg1.adobelogin.com
static.adobelogin.com
static.adobelogin.com
pps.adobelogin.com
*.adobelogin.com
*.dev.adobelogin.com
pps-dev.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1.adobelogin.com
static-stg1.adobelogin.com
monitoring-va6.stage.adobelogin.com
*.dev.adobelogin.com
*.dev.adobelogin.com
ims-prod01.adobelogin.com
ims-prod04.adobelogin.com
monitoring-va6.dev.adobelogin.com
pps-dev.adobelogin.com
monitoring-or2.stage.adobelogin.com
monitoring-sgp5.stage.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
dummy-or2.adobelogin.com
*.adobelogin.com
monitoring-irl1.dev.adobelogin.com
delegated.identity.adobe.com
*.adobelogin.com
ims-na1-origin.adobelogin.com
monitoring-or2.dev.adobelogin.com
*.dev.adobelogin.com
pps-stage.adobelogin.com
*.dev.adobelogin.com
static.adobelogin.com
monitoring-irl1.prod.adobelogin.com
ims-na1.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-irl1.dev.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1-stg1.adobelogin.com
static.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
static.adobelogin.com
static-stg1.adobelogin.com
dummy-or2.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-or2.stage.adobelogin.com
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1-stg1.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
monitoring.adobelogin.com
static-stg1.adobelogin.com
*.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
dummy-or2.adobelogin.com
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
*.identity-stage.adobe.com
monitoring-sgp5.prod.adobelogin.com
*.identity-stage.adobe.com
*.adobelogin.com
static-stg1.adobelogin.com
static.adobelogin.com
*.identity-stage.adobe.com
ims-identity-stg1.adobelogin.com
monitoring-or2.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-or2.dev.adobelogin.com
*.adobelogin.com
*.dev.adobelogin.com
ims-na1-dev1.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-prod07.adobelogin.com
pps-stage.adobelogin.com
*.dev.adobelogin.com
*.services.adobe.com
ims-prod01.adobelogin.com

Certificate

The complete raw certificate details for ims-prod04.adobelogin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQ7OyJSRN7uXJrqM8i9
qsDK3xqGZoDwO3OIzUhrHttT0Awde9OHe+ILhQd0WZHvIydN7SwMsMI4Qc6X2GkF
cjdiuJny4BhZgG4tyj+U/xA3g9VEL1od7a9fvXf2SzS9yjSlD1uK0VZGNOBxgi9M
UUw86StaKT4FZY9XssZtMauRe2T9qy+rVVUrW4hXN5OFBZeZcVl1liOXI3El7Tvc
Siah0JZN/6lagLxDDkR8TqslEvi9xAlRWiCtP4HxXC5tsa4Z/FfJXD8AGHhGG6GO
jAYPUSjySDHtwN2PVMHwPsAoIhddiW60OoMFmjwuafB/1RHT/K+nZ5pZ3zwJLWTS
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1345654380860088063864143821904268154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ims-prod04.adobelogin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25462774699681149703240344516812582965218242972056627764611644416683910673063199724243909488868029037728591316180126424456246698416828962233285421551846054373862184339088795002660124033789220956469741906449280687324347862073661578724661368523809730480341050885887445953768719091774913577409660766228088845181588618789991395917669245592708637230725267111589199175840728496821131819917964978878399254135188636553896948466971453826576669736709467778794209807809563256786446845443256612327380271319029131394935183070565892092525574220297963641390392166096371078416353757894681831480459051521818143544698512042518678655673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString '	�ڟ��m���6��s6� '
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims-prod04.adobelogin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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