vhsigdi1ci.sap.jewels.com

- Signet Group Services US Inc -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number c8:f1:47:33:ba:da:73:92:2c:87:8a:cb:7e:bc:84:03 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Signet Group Services US Inc

Organization: Signet Group Services US Inc
State / Province: Ohio
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): c8:f1:47:33:ba:da:73:92:2c:87:8a:cb:7e:bc:84:03
Serial Number (int): 267098386849436518959343601776817112067
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f7:09:5d:d7:52:ea:48:b3:23:13:0d:60:75:5e:fd:d9:6e:b9:c4:b9
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d0:8d:f1:9d:d2:d7:ce:46:aa:1a:29:fe:18:89:3b:2b:00:7c:a7:e2
Fingerprint (sha256): 25:8c:bf:aa:52:e3:8d:97:e2:3a:91:5c:e3:1f:ea:36:93:8b:0e:11:14:18:db:94:a7:53:f5:b1:7c:b8:bf:32

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate vhsigdi1ci.sap.jewels.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vhsigdi1ci.sap.jewels.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vhsigdi1ci.sap.jewels.com
www.vhsigdi1ci.sap.jewels.com

Other certificates including the domain name jewels.com

(limited to 100 certificates)
qlqw10app00.jewels.com
srsprod.jewels.com
imperva.com
rmm.test.cloud.jewels.com
signet-identity-provider-test.jewels.com
plcosatadm01.jewels.com
credithub-test.azusnc-test.jewels.com
workordersapi-dev.jewels.com
sapbpcuxp.jewels.com
gp-akr.jewels.com
uluf20app00.jewels.com
skuserviceapi.dev.cloud.jewels.com
sigctbanner.jewels.com
signet-cltin-prod-informatica-alb.cltin.cloud.jewels.com
sapfinance.jewels.com
*.jewels.com
jira.jewels.com
dldf10app00.jewels.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
web01-sigcapdev.jewels.com
archiva.jewels.com
vpn.jewels.com
skuserviceapi.dev.cloud.jewels.com
plpb20app00.jewels.com
guest.jewels.com
PWAKSEPAPP01.jewels.com
credpmtcalc-dev.jewels.com
srsprod.jewels.com
credpmtcalc-dev.jewels.com
cc.stage.cloud.jewels.com
signethierarchyprovider.jewels.com
skuserviceapi.dev.cloud.jewels.com
worswebdev.jewels.com
vhsigdi1ci.sap.jewels.com
dldw10app00.jewels.com
worswebuat.jewels.com
srsvendorportal.jewels.com
perf-creditapis.jewels.com
vhsigdi1ci.sap.jewels.com
signet-identity-provider-prod.jewels.com
data.jewels.com
mypc.jewels.com
*.jewels.com
PWAKSEPAPP01.jewels.com
api4.jewels.com
vhsigdi1ci.sap.jewels.com
xconnect.jewels.com
dwakivrweb01.jewels.com
skuserviceapi.dev.cloud.jewels.com
workordersapi.jewels.com
vpn.jewels.com
worsweb.jewels.com
uluw20app01.jewels.com
sappouxp.jewels.com
kay.ercol.test.cloud.jewels.com
uk-alt.ecesb.test.cloud.jewels.com
test.sslvpn.jewels.com
credpmtcalc-prod.jewels.com
sjim-asa-vpn.jewels.com
signet-cltin-dev-inform-int-alb.cltin.dev.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
fed01.jewels.com
creditapis.jewels.com
CAR-C1-ISE-1.jewels.com
pacoclearpass01.jewels.com
credithub-test.azusnc-test.jewels.com
api4dev.zalecorp.com
xconnect.jewels.com
dlde10app00.jewels.com
www.kay.com
posapigateway-perf.jewels.com
dlde10app00.jewels.com
edu-sams-interface.store-ops.cloud.jewels.com
saps4huxp.jewels.com
plpf20app00.jewels.com
sjim-asa-vpn.jewels.com
stage-repair.jewels.com
credithub-dev.azusnc-test.jewels.com
vpn.jewels.com
PWAKRPAAPP01.jewels.com
rhesprodsat02.jewels.com
signetquota.cloud.jewels.com
cpayprod.jewels.com
uk-queue.ecesb.stage.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
www.kay.com
qlqw20app00.jewels.com
signetanalyticsservice.jewels.com
test.sslvpn.zalecorp.com
pwakslwnapp01.jewels.com
sma.jewels.com
skuserviceapi.dev.cloud.jewels.com
signetwarrantyapp.jewels.com
cc.dev.cloud.jewels.com
sigctbanner.jewels.com
cc.test.cloud.jewels.com
pwakivrweb02.jewels.com
travelevents-dev.jewels.com
vhsigdi1ci.sap.jewels.com

Certificate

The complete raw certificate details for vhsigdi1ci.sap.jewels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267098386849436518959343601776817112067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Signet Group Services US Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vhsigdi1ci.sap.jewels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728701625444483959181217820042627998589691885071975856095780257727885739794272777416865447796017205275245857380686337270365218821499338251140783425362295447082853202198819256064249759145232925633464865704099933232835661747878889992411161189369159770360246034553651904559722145618361621035050612351289730620551456350346659506730351880251982675009469123422768168970790872277219086448709750196372181505571467744360274353035226297672975751584327612814809065101936377559828743313716367879495507806482905177645807746958109674867065123013252795763490718013903815645239607471246692541743545178983535443003960147571721177506548026047891983832515794179419404211384012854340258259075360445558761324606949021029028730994759922120657491679635850527425158483653993321621449734833032748862139048053923583668762361013959589069489163949097665069327134000195193938148572982308515995195675221741574924456537838953053906084733840488936207806305789258263261121381619743143930300105298117800332438669857802518435407241592348178311898872339026317253779148934570659413782626238432835998684733849664839488478519523182827142311088930265259019543829324363521259508376278085065948588522752198610124451249368869233095641489974839378203952998781278708283249942757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7095dd752ea48b323130d60755efdd96eb9c4b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhsigdi1ci.sap.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhsigdi1ci.sap.jewels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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