*.jindalstainless.com

- Jindal Stainless Corporate Management Services Pvt. Ltd. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:c4:5c:3f:7a:38:6f:c8:a2:dd:20:24:de:8e:8c:92 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jindal Stainless Corporate Management Services Pvt. Ltd.

Organization: Jindal Stainless Corporate Management Services Pvt. Ltd.
State / Province: Haryana
Locality: Hisar
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:c4:5c:3f:7a:38:6f:c8:a2:dd:20:24:de:8e:8c:92
Serial Number (int): 16970297144574989970236435981736512658
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:fd:a8:bd:2a:c8:d1:d7:24:b8:e7:ce:28:e2:41:1e:dc:50:93:51
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 55:8a:c3:d7:09:36:41:3c:26:27:44:68:d8:0b:0c:c1:c0:7e:9a:65
Fingerprint (sha256): 3d:ca:dd:75:48:80:d6:68:a5:54:95:72:a4:dc:20:55:a2:96:27:a4:57:42:e0:5a:66:d7:c8:7a:cd:d5:ed:24

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.jindalstainless.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jindalstainless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jindalstainless.com
jindalstainless.com

Other certificates including the domain name jindalstainless.com

(limited to 100 certificates)
help.ummeedhfc.com
sdp.manageengine.live
helpdesk.geeksforgeeks.org
servicedesk.nykaa.com
helpdesk.nlbconnect.com
welithelpdesk.wipro.com
sdp.manageengine.live
ithelpdesk.niairport.in
helpdesk.nlbconnect.com
helpdesk.scimaxglobal.com
Jindal Stainless Limited
helpdesk.doyen.co.in
sdp.manageengine.live
Jindal Stainless Limited
dashboard.jindalstainless.com
ithelpdesk.tatanexarc.com
help.ummeedhfc.com
helpdesk.hcgel.com
sdp.manageengine.live
itservicedesktest.mu-sigma.com
servicedesk.linkintime.co.in
helpdesk.radico.co.in
*.jindalstainless.com
ithelpdesk.gmmcoindia.com
helpdesk.jindalstainless.com
sdp.manageengine.live
helpdesk.geeksforgeeks.org
helpdesk.247hire.com
helpdesk.geeksforgeeks.org
helpdesk.gmmchennai.com
servicedesk.ascent-online.com
help.ummeedhfc.com
helpdesk.nlbconnect.com
*.jindalstainless.com
sdp.manageengine.live
servicedesk.kushals.com
helpdesk.radico.co.in
help.ummeedhfc.com
*.jindalstainless.com
servicedesk.fanucindia.com
sdp.manageengine.live
*.jindalstainless.com
helpdesk.scimaxglobal.com
helpdesk.jgh.co.in
servicedesk.fanucindia.com
Jindal Stainless Limited
Jindal Stainless Limited
helpdesk.dobby.co.in
welithelpdesk.wipro.com
helpdesk.gmmchennai.com
helpdesk.247hire.com
sanithelpdesk.sansera.in
servicedesk.linkintime.co.in
help.ummeedhfc.com
helpdesk.jindalstainless.com
welithelpdesk.wipro.com
ithelpdesk.gmmcoindia.com
help.ummeedhfc.com
ithelpdesk.gmmcoindia.com
helpdesk.radico.co.in
helpdesk.scimaxglobal.com
help.ummeedhfc.com
helpdesk.hcgel.com
helpdesk.scimaxglobal.com
*.jindalstainless.com
helpdesk.gmmchennai.com
helpdesk.247hire.com
helpdesk.hcgel.com
help.ummeedhfc.com
help.ummeedhfc.com
sdp.techensglobal.com
ithelpdesk.niairport.in
helpdesk.alqimi.com
helpdesk.jgh.co.in
sdp.manageengine.live
itservicedesktest.mu-sigma.com
ithelpdesk.gmmcoindia.com
sdp.manageengine.live
welithelpdesk.wipro.com
helpdesk.hcgel.com
ithelpdesk.gmmcoindia.com
sdp.techensglobal.com
help.ummeedhfc.com
sanithelpdesk.sansera.in
help.ummeedhfc.com
servicedesk.ascent-online.com
sdp.techensglobal.com
*.jindalstainless.com
*.jindalstainless.com
helpdesk.doyen.co.in
helpdesk.doyen.co.in
sdp.manageengine.live
itservicedesktest.mu-sigma.com
sdp.techensglobal.com
helpdesk.jgh.co.in
helpdesk.alqimi.com
helpdesk.gmmchennai.com
helpdesk.jgh.co.in
ithelpdesk.gmmcoindia.com
helpdesk.radico.co.in

Certificate

The complete raw certificate details for *.jindalstainless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SWrhKhtMR6d56zPj/0+
qTXPTK59d1fso3JrNW25vBzO9/kogl6oYbaCFCtfSUEBb9JfmsdFvQ46seMdm1MW
uYNpbNFZ6XdVG4YAGiW8bdNvPNWrbcq3BkIVxIQXRPc1sMphohz8AXwfDC5N+uAN
Kg8T5vFcpywuTsNJ4JQIoogrNLt5Bu2SQ6VFKwmO3VYS0+sifYg6i5NKIgol8gAz
mH+CAobW/U6gbt0JWPmOdfVNazSnJ3WRnFWOV7egadK+lsNsIsRju/CUtlwO1lB8
t0Y2mssmCw+SEAfK2po4wYhfWMzNwA8atTSoWyTQRCyCWA/Wism3iKFse0WUcbTl
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16970297144574989970236435981736512658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hisar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jindal Stainless Corporate Management Services Pvt. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jindalstainless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30442007262671633088384488206242033451019939180102116041434733430390751833652953365675366709878404794009270040497482491818744713110306363345574447326211454345063519160162143789823049691223488288308806762257033048835747769370728806109168275340824466264059709565814632941110968160821415045600774208679819943527372851501915322547047011282975120261210847678280423543666868695059967332754183509476909392435643124202745127514539076755399010392186894082365909959848081481284778456327533619255508566606585903945470371501402008947492297823155262510271252027443301531996450466601537040743869514397387925431531717038758740419869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37fda8bd2ac8d1d724b8e7ce28e2411edc509351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jindalstainless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jindalstainless.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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