sentrynalao365.roche.net

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 10:88:ec:5d:cc:32:43:20:52:63:55:0e:53:21:ff:4a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=sentrynalao365.roche.net

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:88:ec:5d:cc:32:43:20:52:63:55:0e:53:21:ff:4a
Serial Number (int): 21978594385400671434066478573493026634
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): fa:38:57:fa:e7:58:80:e0:b0:be:eb:cf:13:f5:01:c8:c3:ca:7c:65
Fingerprint (sha256): 20:3f:f5:2f:9d:87:c1:6d:b1:e5:99:5d:83:79:d4:9b:b3:f2:a4:4c:fd:d9:7e:63:d6:7a:bb:56:45:a9:34:84

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate sentrynalao365.roche.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sentrynalao365.roche.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sentrynalao365.roche.net

Other certificates including the domain name roche.net

(limited to 100 certificates)
coaguchek.com
partneraccess.roche.net
sentry-ppe.roche.net
edi2.roche.net
mdm.roche.net
sni.cloudflaressl.com
*.edidev2.roche.net
sg3vk030.roche.net
range.roche.net
sentryasiagmail.roche.net
sentrygmailtest.roche.net
vpn.range.roche.net
*.edidev2.roche.net
remoteaccess.roche.net
*.edi2.roche.net
rosa.roche.net
rkavoglh.roche.net
sni.cloudflaressl.com
se2vk030.roche.net
mdm-test.roche.net
partneraccess.roche.net
remoteaccess.roche.net
esrv-hub-uat.roche.net
*.editest2.roche.net
sni.cloudflaressl.com
editest3.roche.net
se2vk030.roche.net
se3vk030.roche.net
*.edi2.roche.net
sni.cloudflaressl.com
api-home.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sentryasiagmail.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
rkavoglh.roche.net
*.rosa.roche.net
prod.rosa.roche.net
sentryemeao365.roche.net
cat.navify.esrv-hub-dev.roche.net
sni.cloudflaressl.com
ridusaxprod.dia.roche.net
aauthctx.roche.net
api-home.roche.net
sni.cloudflaressl.com
api-uat-home.roche.com
roche.net
edidev2.roche.net
*.edi2.roche.net
mb2vk030.roche.net
sentrynalao365.roche.net
roche.net
vpn.range.roche.net
roche.net
api-home.roche.net
roche.net
*.range.roche.net
mdm-dev.roche.net
range.roche.net
home.roche.net
sni.cloudflaressl.com
zh5vk030.roche.net
smartwebpoc.roche.net
roche.net
edi2.roche.net
cat.navify.esrv-hub-dev.roche.net
api-uat-home.roche.net
api-home.roche.net
*.edi2.roche.net
roche.net
api-home.roche.net
*.range.roche.net
sni.cloudflaressl.com
vpn.range.roche.net
remoteaccess.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
esrv-hub-dev.roche.net
sni.cloudflaressl.com
roche.net
*.edidev2.roche.net
businesspartners.roche.net
sni.cloudflaressl.com
mdm-test.roche.net
range.roche.net
*.rosa.roche.net
esrv-hub-uat.roche.net
mb2vk030.roche.net
se2vk030.roche.net
range.roche.net
sni.cloudflaressl.com
uat-home.roche.net
sentry-ppe.roche.net
fr4vk030.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
mdm.roche.net
edidev.roche.net
sni.cloudflaressl.com

Certificate

The complete raw certificate details for sentrynalao365.roche.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGRvkY2w9G1aTZ1M1ZGe
DrQX57oQUdU6wz8JwQntAboNxH3OiXQuv14JsGd79vAcllSX1TcWMpe9Pw0JKUux
Wme0L2eNA+dakBXUHUu/aYPlsmWQ583yw4NRr08hICdnU+1n+fAnj7xoSt2e1z94
tq1Y6I7XdpnIYPTTYpS7PAYKA0lB0qAH0v1LWMXryMvPvZi8RtgdWQe+Z/bcbtbK
GJIWob9MtZYmWFCzaDZoXaexNGr/kMs80ERkDViwWmkeDw9PSsas5lbkzEciDXxV
8owaQ3vq6o286wk+JHL6LbDJryu+xt7NCSRQ+nhA0xUzv1WThg7XroR5rJrAPxi4
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21978594385400671434066478573493026634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sentrynalao365.roche.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25802140959201433326874880810445190856260331378292096417973316290205093824184309812480231056331789928721887155891343133168399182747482853075359783584469482298658716085816841806235641807856014703160888850269422211074868846739836791158851252307907772711570059024341235758761668992101400059264857476177476619438193130191598092764343606064884913965810311549038226399416467711662521362799480687239457154747542952574009272865437648653726741093397490393161006489824209048085779051980619185532530847747822585612097741989160998468966254592095531317994701796686732748100882772151410718971865381730906654696249609645122637051907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentrynalao365.roche.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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