sso.deloitte.ai

- Deloitte GmbH Wirtschaftspruefungsgesellschaft -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4e:2f:dd:44:15:ee:f1:92:89:c1:1e:9c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deloitte GmbH Wirtschaftspruefungsgesellschaft

Organization: Deloitte GmbH Wirtschaftspruefungsgesellschaft
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:2f:dd:44:15:ee:f1:92:89:c1:1e:9c
Serial Number (int): 24197695178538580266518126236
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b1:7e:f6:3f:d5:6c:09:83:8f:15:1f:84:1c:3f:0f:d4:1b:f0:11:06
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 02:e4:f0:86:fa:2b:c0:70:a3:a1:d1:0d:c3:68:c3:4b:a9:5c:fb:50
Fingerprint (sha256): 37:e8:23:f2:e6:55:99:31:52:8f:d5:2b:88:e5:47:3c:bc:7b:c3:46:08:ef:a9:6a:95:48:ae:ef:10:27:f5:ab

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate sso.deloitte.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.deloitte.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.deloitte.ai

Other certificates including the domain name deloitte.ai

(limited to 100 certificates)
i-fenrirdaliandev.ra9.app
lacksautomotive.com
www.starjourney.nightspeller.net
download.service.deloitte.ai
gke-test.gnosis-gcp.api.deloitte.ai
documentation.newstime.qreate.website
www.admin.sper.com.vn
bookdroptaxi.com
soundsoflifehc.com
www.cotonoudirectinter.com
www.vistafalcon.com
cryptolottery.top
sistema.mdetroca.com.br
2cl.com.br
blackandwhiteacrobanfield.turnosweb.app
www.cesarcanvasupholstery.com
www.pensioenbijhorticoop.nl
ryh-tay.com.tw
decisionservice2-test.service.deloitte.ai
apisuite.service.deloitte.ai
links.lounge.live
www.cssinspector.com
login-test.service.deloitte.ai
www.codaptive.help
rojnew.com
aap.service.deloitte.ai
compass-test.service.deloitte.ai
intriot.io
piekut.co.uk
apisuite-test.service.deloitte.ai
sm.enquirytracker.net
web.digiqc.com
email-triage.srv.deloitte.ai
link.downatdart.me
download-test.service.deloitte.ai
billing-test.api.deloitte.ai
deloitte.ai
series.grahammacphee.com
29a8fd3c867370156ef11abce3d76f09.scientrix.api.deloitte.ai
email-triage.srv.deloitte.ai
*.api.deloitte.ai
e4c258f645c9d51fc76d8b43027ca519.scientrix.api.deloitte.ai
www.samani.ai
letzdoit.co.in
app.justrussel.com
admemer.com
customer.deloitte.ai
noreply.oiloncanvas.app
apisuite.service.deloitte.ai
dcsptest-aop.service.deloitte.ai
sso.deloitte.ai
undial.service.deloitte.ai
walkthroughs.dev
435e09bacb459472ae46da612eb397c4.modelx-gcp.api.deloitte.ai
snakee.tk
link.ovr.ai
resources.njcareers.org
billing.assetmarketplace.deloitte.ai
corona-dev.promise-pay.com
molgress.com
woodboxph.com
www.filterspaceinseoul.com
www.ithrasync.com
www.cheruiyot.com
11521047.peerly.app
app.justrussel.com
ca79d865c61741590a8e918b2d03e4a7.scientrix.api.deloitte.ai
idk.novalingvo.app
www.troopermoves.com
g-fit.co.il
cca.denniscalazans.com
go.quranmajeed.net
ucits-eligibility-classifier-test.service.deloitte.ai
hannahbuchenau.com
www.getumbrella.xyz
team.center
yso.tw
www.deloitte.ai
koppeling.nutheorie.nl
pos-staging.phongvu.vn
www.yummyfy.app
prod.punct.co.il
deep-process-analytics.service.deloitte.ai
customer.deloitte.ai
expo.kianadev.com
support.cryptomood.com
deloitte.ai
soundsoflifehc.com
app.phaver.it
chalka.kr
www.manuelrdz.com
support.cryptomood.com
lequiz.app
institute.deloitte.ai
team.center
samurai.service.deloitte.ai
deloitte.ai
gilbertorochaimoveis.com.br
compass-gcp-test.api.deloitte.ai
www.cotonoudirectinter.com

Certificate

The complete raw certificate details for sso.deloitte.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F8z+rkX9BMTlT/RLVGb
gxSaw6MhJU5Edlxgg0Wiu6/m4EPTHs7zgoZm+2mzByMMKcaN7mzZk97jO+fp9cPc
DFoOtwP8mBuvxSy5yvFcOhaHPSVD67xd3r3yrU+UD0YEnqKa6xcR30bDf+NjSJuz
QtHRPzCH1m8iEtQBq4qRCMtycEcYCUP+9hVR5qfpUNp8tKIwNbrgezSFzoLWcvoh
keTsjgPFkB/1IZHBnLzW/w1Z9j9mme2lVVyXfxt3w+f5eJMMYueJMFNK2/TQ1dEB
r2GYm2EpeqcrVr5L1GmXrvZCGVtus+kdIQDryoy/+VQ4HsMZzC2H5B6qcu0q6zhG
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24197695178538580266518126236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 12:01:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-29 12:01:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deloitte GmbH Wirtschaftspruefungsgesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.deloitte.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27819373463481044807664747074837104765644512013426567878020746610299014914070816638866307556376113667535684637938168008538694235656323461060585648415557681063770241901135404457411317947321301948417349189472682728596342716077849012941014040341338303256263030974775535596461744789243912852496964756415482743081761112710278061834930074390657418319943466390038345233437582157950734404261474757320379743595025391442597379040867821065184695334634241042889249055192287530525454347831758189550116652490040992492963327023465158279541331940515172030604431574313264737322714451390620186966936474174570782459100312455355374781981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.deloitte.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b17ef63fd56c09838f151f841c3f0fd41bf01106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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