tesmobility.datamatics.com

- DATAMATICS GLOBAL SERVICES LIMITED -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:79:55:e0:1a:8b:86:06:fc:02:43:51:b6:2c:a5:50 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DATAMATICS GLOBAL SERVICES LIMITED

Organization: DATAMATICS GLOBAL SERVICES LIMITED
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:79:55:e0:1a:8b:86:06:fc:02:43:51:b6:2c:a5:50
Serial Number (int): 19239201621011533821132870252548105552
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:a1:0d:bb:b8:80:59:69:ea:2d:7c:8f:76:f9:b3:fe:6a:02:75:c6
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 84:bd:14:2b:be:79:74:b7:14:54:2b:69:aa:d4:cf:02:e1:9c:0b:9b
Fingerprint (sha256): 3d:5d:38:cf:0c:08:05:dc:a9:0e:0b:0a:0a:c8:82:64:b7:49:e9:ca:4c:57:0d:3b:23:a2:43:8f:7b:04:88:9a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate tesmobility.datamatics.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tesmobility.datamatics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tesmobility.datamatics.com
www.tesmobility.datamatics.com
afcserver.datamatics.com
tesmobilityserver.datamatics.com

Other certificates including the domain name datamatics.com

(limited to 100 certificates)
trufare.datamatics.com
vpn.datamatics.com
careeaseproduct.datamatics.com
careease.datamatics.com
brand.datamatics.com
websitetest.datamatics.com
gosocial.datamatics.com
careeaseproduct.datamatics.com
webmail.datamatics.com
dx.datamatics.com
staging.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
events.datamatics.com
trubot.datamatics.com
blog.datamatics.com
careease.datamatics.com
cssgweb.datamatics.com
www.datamatics.com
www.pulse.datamatics.com
*.DATAMATICS.COM
esurvey.datamatics.com
trubot.datamatics.com
www.digital.datamatics.com
resource.datamatics.com
www.epm.datamatics.com
trubot.datamatics.com
brand.datamatics.com
digital.datamatics.com
webmail.datamatics.com
trubot.datamatics.com
owa.datamatics.com
careeaseproduct.datamatics.com
event.datamatics.com
iosmdm.datamatics.com
webmail.datamatics.com
prism.datamatics.com
cm.datamatics.com
io.datamatics.com
webmail.datamatics.com
trubot.datamatics.com
dx.datamatics.com
careeaseproduct.datamatics.com
trufare.datamatics.com
event.datamatics.com
tesmobility.datamatics.com
social.datamatics.com
www.pulse.datamatics.com
social.datamatics.com
owa.datamatics.com
social.datamatics.com
cssgweb.datamatics.com
owa.datamatics.com
careeaseproduct.datamatics.com
careease.datamatics.com
events.datamatics.com
www.pulse.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
www.pulse.datamatics.com
io.datamatics.com
io.datamatics.com
websitetest.datamatics.com
careease.datamatics.com
www.datamatics.com
social.datamatics.com
blog.datamatics.com
webmail.datamatics.com
websitetest.datamatics.com
digital.datamatics.com
trubot.datamatics.com
dx.datamatics.com
webmail.datamatics.com
www.datamatics.com
vpn.datamatics.com
careeaseproduct.datamatics.com
websitetest.datamatics.com
*.datamatics.com
tesmobility.datamatics.com
trubot.datamatics.com
careeaseproduct.datamatics.com
tesmobility.datamatics.com
vpn.datamatics.com
www.datamatics.com
www.datamatics.com
healthmonitor.datamatics.com
event.datamatics.com
digital.datamatics.com
www.digital.datamatics.com
www.pulse.datamatics.com
staging.datamatics.com
websitetest.datamatics.com
www.digital.datamatics.com
io.datamatics.com
vpn.datamatics.com
webmail.datamatics.com
dx.datamatics.com
io.datamatics.com
epm.datamatics.com
mobility-test.datamatics.com

Certificate

The complete raw certificate details for tesmobility.datamatics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEKDbN/DTqGbdiz3IyOd
LA7Htyvq2+TPWeRag7yuWOg6F0uLKPgC2nk80JdxV/37+zxJ0rfOe59uk9KvgEWf
s9Zm7SwEB8BdAaFrnmXSdxya7fu8Tuzd7bFeMu0Vh4hR1RqbyrTTugiTskvncBZv
rB11VPs8IYRivwb9vlV/S4nSlr22to12xCQLDVMWwYVBUi9TBy6WmZ3ThwZgJO+0
3xqc2W6sCPu7HIrghp43nq81wa4RiHHfFCNLjIJG5jkvG4SkIXHwhoNDbUe/u1Lq
BvHBjh550LRy3Wki1iYieUBH7kfFaZR7ra06a+lxT22Q2NxAQHG02oLb6zzUK8Dq
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19239201621011533821132870252548105552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DATAMATICS GLOBAL SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tesmobility.datamatics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23260647083885155951391282847434552619072040930990289191402338276994549347230470137414591928082092235007649030182349714387324123561440218737935150542286829908670353874724052781218118764802229712991510305061046822676067669595973510444164886790514701513042065563232406495037085759786085186476151034142252055016746023497570044258378964473550136024716157071701522190088467632907336458936536274069544952265033911161065287578420232182952287336459433186430519994584245427422270243967609473266149772708655506202856643659610040960050288640247968200701026892035203482231558412274636002384840055246140016101214312965732642646649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3a10dbbb8805969ea2d7c8f76f9b3fe6a0275c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesmobility.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesmobility.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afcserver.datamatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesmobilityserver.datamatics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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