*.advantest.com

- Advantest America, Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:ff:e2:67:10:28:9a:71:54:d8:f9:68:ae:6d:b4:9e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Advantest America, Inc

Organization: Advantest America, Inc
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:ff:e2:67:10:28:9a:71:54:d8:f9:68:ae:6d:b4:9e
Serial Number (int): 14620907646847550546016390623852868766
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:8c:2d:d0:ab:30:83:9e:07:a4:a5:a7:b3:6a:e1:c8:fe:5b:03:d4
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 64:e7:12:23:23:ee:03:4f:1b:8b:a0:de:eb:48:88:6d:3e:c0:02:1f
Fingerprint (sha256): 25:f8:c3:f3:1b:38:01:bb:c0:07:51:d7:49:c9:49:ae:ad:2d:5c:33:38:76:d2:40:1f:69:7b:6a:65:32:55:8d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.advantest.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.advantest.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advantest.com
advantest.com

Other certificates including the domain name advantest.com

(limited to 100 certificates)
soporte.m-studio.one
customer-support.zoho.com.cn
grupocondominios.groupsoftware.com.br
dedcbexpwc01.advantest.com
support.lpros.biz
support.unboxpaint.com
support.intellitechsystems.co.za
advantest.com
trellix.inflowtechnologies.in
support.snapcastweather.com
support.alephys.com
tktdesk.qtesting.online
support.xeroxuae.cloud
help.webspecia.in
ticket.savvyhawk.net
support.snapcastweather.com
support.intellitechsystems.co.za
eucucm.advantest.com
brubank.lirium.com
support.okra.ng
jpcimp.advantest.com
support.automated-control.com
support.intellitechsystems.co.za
www.patolo.jp
support.maxopolyworldnews.com
support.intellitechsystems.co.za
support.intellitechsystems.co.za
support.zea-iot.com
support.realtimemed.com
support.unboxpaint.com
usdcnexpwe02.advantest.com
support.cloudpso.com
dedcbexpwe02.advantest.com
help.epic36.com
dedcbexpwe01.advantest.com
VPN-US.advantest.com
support.epigrid.com
soporte.avp-ec.com
support.clouddistributie.nl
support.intellitechsystems.co.za
jupyterhub.glasswall.advantest.com
*.advantest.com
support.intellitechsystems.co.za
support.lpros.biz
support.intellitechsystems.co.za
soporte.nerdcom.do
customer-support.zoho.com.cn
desk.tecknohub.com
support.unboxpaint.com
employees.prepca.com
usdcnexpwe01.advantest.com
cucmlabexpwc.advantest.com
dedcbexpwe02.advantest.com
*.advantest.com
support.tilopay.com
support.intellitechsystems.co.za
jp.support.te-cloud.advantest.com
soportesistemas.uaa.com.ar
advantest.com
VPN-US.advantest.com
weshare.advantest.com
support.beadleandgrimms.com
support.unboxpaint.com
support.intellitechsystems.co.za
*.advantest.com
support.intellitechsystems.co.za
support.sreeveniv.com
advantest.com
support.praetoriansystems.us
ecard.advantest.com
jpcimp.advantest.com
usdcnexpwc01.advantest.com
clients.quicknummy.com
eu.te-cloud.advantest.com
support.tilopay.com
sg.support.te-cloud.advantest.com
uscuc.advantest.com
support.easeit.com.au
sg.support.te-cloud.advantest.com
grupoprimavia.12ti.com.br
support.swarmrewards.io
suporte.pizzattolog.com.br
support.intellitechsystems.co.za
styleguide.advantest.com
support.intellitechsystems.co.za
vpn-sjc.advantest.com
support.ehakkexpress.com
usdcnexpwc02.advantest.com
suporte.pizzattolog.com.br
*.advantest.com
b2btest.advantest.com
support.unboxpaint.com
www.patolo.jp
help.webspecia.in
vpn-muc.advantest.com
*.advantest.com
support.1rink.com
live-support.deer-tek.com
test.forsk.com.cn
support.intellitechsystems.co.za

Certificate

The complete raw certificate details for *.advantest.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfwTEzhXVOiEDiPjzfaX
jSb9pQEfEsEvdCHbeUQjXN0vn0x27oarjHsEAPJSiUfKS2dZeOFv5+jBOsREFsk+
WaVLFxNZj4NV1Da3OeiA8ZyvodROfTK4BQjK3q1t3+e4BHVPgCU4GhcUEoDZ9wN/
Cj8HWdvpWSPt3kMbD72WDMJAK8n+DaYm69GdBDVZdWDKEjgSnqC+UUH7ZUsdRht2
LN8TB8cGsztXBg783dG+Gne4PdCOtmcEwZSe/gebfIENJLZ25ndxF2btB1Q9pwMz
dCHslVvWQDqa86yX41W2mPwn8bj+AGGtiRzLolSfwP/G4MbVNN5NLfKG0gfw/6Eu
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14620907646847550546016390623852868766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Advantest America, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.advantest.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19438763234506991920040081163591106085358589842235395873826846472840772285472966709317350018747283716558427632076335931642833881514461075798814366995613328475161519438438282775217610131312435966189200226398849060456186227219015044008915209340861875423273201484648901918951629345072308497360773347781387140869602005700978960807743708165109490730647869950322857855154223708694279520676451892288306315146930287957084213573990366586970793345603428944647249044074131889907316484087671757659875391650382418363054387642460053808645209695767655931978026443365727245219177357941935219317571888690837339071093584750783135559351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d8c2dd0ab30839e07a4a5a7b36ae1c8fe5b03d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advantest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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