webmail.bruker.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c7:0c:45:a0:e8:91:a1:6d:f5:87:ff:7c:05:56:db:5a was issued on by Sectigo Limited.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmail.bruker.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): c7:0c:45:a0:e8:91:a1:6d:f5:87:ff:7c:05:56:db:5a
Serial Number (int): 264580090958245909738740652070091021146
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: df:c8:90:a6:84:62:28:bd:5e:2f:ec:59:05:8b:17:0e:27:39:7f:14
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 16:e9:27:13:4d:bd:38:99:d6:60:54:bf:88:8e:0a:06:43:a3:e7:c5
Fingerprint (sha256): 34:2c:81:7e:b4:92:39:b3:2c:d3:58:a1:ae:ca:1d:53:85:81:08:7d:39:b1:f7:81:b8:68:ff:6c:6e:b2:ac:03

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate webmail.bruker.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.bruker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.bruker.com
autodiscover.acuityspatialgenomics.com
autodiscover.biognosys.com
autodiscover.bruker.com
autodiscover.gauss-fusion.com
autodiscover.incoatec.de
autodiscover.inscopix.com
autodiscover.miro-analytical.com
autodiscover.molecubes.com
autodiscover.optimal-ltd.co.uk
autodiscover.optimal-tech.co.uk
autodiscover.pinpointtesting.com
autodiscover.preomics.com
autodiscover.sciy.com

Other certificates including the domain name bruker.com

(limited to 100 certificates)
bruker.com
*.autodiagnose.bruker.com
bruker.com
*.adiag-qa.bruker.com
mbna.bruker.com
licensecentral-bdal.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
store-stage.bruker.com
www.bruker.com
mbns.bruker.com
*.bruker.com
cibrubwp07.bruker.com
www.bruker.com
*.bruker.com
*.adiag-dev.bruker.com
www.bruker.com
*.bruker.com
guestportal.bruker.com
sso.bruker.com
bruker.com
licensecentral-bbio.bruker.com
mbna.bruker.com
mc.bruker.com
*.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
webmail.bruker.com
mbna.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
monitoring-mrs.bruker.com
fileshare-nano.bruker.com
mbns.bruker.com
knoluvit.adiag-dev.bruker.com
monitoring-mrs.bruker.com
www.bruker.com
licensecentral-bopt.bruker.com
mhmp.bruker.com
*.autodiagnose.bruker.com
*.adiag-dev.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
bruker.com
login.bruker.com
*.autodiagnose.bruker.com
ok.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
ok.bruker.com
*.bruker.com
cibrubwp07.bruker.com
bruker.com
mc.bruker.com
guestportal-01-emea.bruker.com
monitoring-mrs.bruker.com
ibcm.bruker.com
licensecentral-bbio.bruker.com
fileshare-nano.bruker.com
fileshare-nano.bruker.com
*.adiag-qa.bruker.com
fileshare-nano.bruker.com
bruker.com
www.bruker.com
repo-bbio.bruker.com
mc.bruker.com
opticsblog.bruker.com
bruker.com
*.bruker.com
www.opticsblog.bruker.com
fileshare-nano.bruker.com
*.bruker.com
bruker.com
guestportal-02-emea.bruker.com
www.opticsblog.bruker.com
www.opticsblog.bruker.com
www.bruker.com
licensecentral-baxs.bruker.com
cibrubwq05.bruker.com
login.bruker.com
login.bruker.com
cibrubwp07.bruker.com
licensecentral-baxs.bruker.com
*.bruker.com
mc.bruker.com
fileshare-nano.bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
fileshare-calid.bruker.com
mhmp.bruker.com
autodiscover.bruker-nano.com
cibrubwp07.bruker.com
fileshare-calid.bruker.com
www.bruker.com
fileshare-calid.bruker.com

Certificate

The complete raw certificate details for webmail.bruker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnOV+urA86zKmfB8fJwt
97u7P6vK9bBWcq3E42Tsaig61Hyzvdm/1SdqDPbLSL+LX1/FW12c0/wrOJ6dV+qA
buUvUPmwDzAk9a3TvV8SkncauWWZnqZJy4z6Y8U2MVKuuLXDJissqOZO/mAbVk0h
bDaHsUaQWEstP0B5UXrgMPcgFm9N36fscogxyHeP8M4mbdsoD/NunSfen7DFYVZ+
ym3h6XinRf2/2cDZopY1DIACNJSD2MPSIVtB7ki5MtrwT5mwWwU+HS+aNBhaZBnF
Wqtb6NpFcxq6RxJnUrjAaXvj5iAqzb9aM95I+qRWhjPR41UOJxEVthrZb+CxihPg
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264580090958245909738740652070091021146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.bruker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032369015685283159242104338607037977049618481549343018795242433007983464605490313517498191766092837370768678494222363833358485733695394109117154178244452229838029581167654803183551202799649109048124143738989190338057843713013787275043931738302275178108289375996831424426150757733785970664265312532130176677230324332393554560036829074555533097081811184215375646800217593609338647694136971319943935254635835296906616513855738179771964668237349247666876779445313273825733489367698991435496060646178558461372904608390559527349412403888284080409445229776175394746703870019489768976415002009256266883926879643703339901041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfc890a6846228bd5e2fec59058b170e27397f14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1f755c920000040300473045022100efe0939469dc1496621bb5d4cae76a1028e13bfbea2c6b2906dd14880e7c52e702206826a25344fda872dc74dca4f499f3324d6bd6d3ddd0ce1276f9581b786ec5b50077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c1f755d660000040300483046022100bc1ba991271d99e42e4d1c7a43cda1ba6fe2c19d34055a93193ddd8d9f2368cf022100d2c9917dee9a8b63711139ef32fbbd57d8a81a7c02aca748e24f1d6a90c33877007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1f755ce300000403004730450220513de915080a299c48ef3d2afb95ba531c1fb672eb2f009a1748a32e9a8fa63a022100d8a64ba9035cfef749f50e73da61966880677c8615d98d555a405b333ef97b94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (412 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bruker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acuityspatialgenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.biognosys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bruker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gauss-fusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.incoatec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.inscopix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.miro-analytical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.molecubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.optimal-ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.optimal-tech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pinpointtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.preomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sciy.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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