gloshspasp01v.hgrs.holcim.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 65:ef:82:db:de:91:33:51:d6:15:7b:f8:c8:43:86:76 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gloshspasp01v.hgrs.holcim.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 65:ef:82:db:de:91:33:51:d6:15:7b:f8:c8:43:86:76
Serial Number (int): 135495640656563601082034343056473556598
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 98:98:98:b6:ea:1d:3d:e9:99:9a:16:dd:51:ee:83:16:d1:40:ec:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 2d:09:a5:97:b8:89:1c:50:41:14:67:77:5d:12:76:ef:1c:7d:09:ac
Fingerprint (sha256): 40:33:38:b6:c2:35:98:95:57:30:37:b0:81:c9:36:27:83:63:c3:2f:b7:e2:82:4d:e5:e5:b0:e2:45:14:3f:b4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate gloshspasp01v.hgrs.holcim.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gloshspasp01v.hgrs.holcim.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gloshspasp01v.hgrs.holcim.net
www.gloshspasp01v.hgrs.holcim.net

Other certificates including the domain name holcim.net

(limited to 100 certificates)
corporate-ise2.hgrs.holcim.net
holporsso.holcim.net
webmail02.ea.holcim.net
hanzsapdev.oc.holcim.net
VPNFBNL.EA.holcim.net
holporsso.holcim.net
hnaadc501.extq.na.holcim.net
lassxp2cip02v.la.holcim.net
*.oc.holcim.net
HEAB-ITSC-A007.ap.holcim.net
nasnctxappd01.na.holcim.net
vpn.au.holcim.net
nasnctxapqa01.na.holcim.net
hnamgw001.na.holcim.net
integration-pmw.ea.holcim.net
emea-webmail.ea.holcim.net
holporsso.holcim.net
usa-dund1-ise3.na.holcim.net
HEAB-ITSC-A006.ap.holcim.net
emea-webmail.ea.holcim.net
amanpmpinpd51.na.holcim.net
hanzappsdev.oc.holcim.net
eurnediappd01.ea.holcim.net
hnaadc001.ebusiness.na.holcim.net
AP-SGS-SP901.in.holcim.net
carrierportal.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
amanpmpinpd01.na.holcim.net
deuha-webmail.ea.holcim.net
holcimconecta.ea.holcim.net
hnaadc502.extqa.na.holcim.net
nasnwfmwspd01.na.holcim.net
qlikview.na.holcim.net
*.ea.holcim.net
holporsso-qa.holcim.net
hnaadc501.ext.na.holcim.net
integration-bmw.ea.holcim.net
hnaadc501.ebusiness.na.holcim.net
glosxp1appd01.hgrs.holcim.net
usa-dund1-ise3.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
AP-SGS-VH141.in.holcim.net
hgrsuhep.hgrs.holcim.net
holporsso-qa.holcim.net
hnaadc001.ext.na.holcim.net
vnmds03.ap.holcim.net
usa-dund1-ise4.na.holcim.net
NAWFMSP01.na.holcim.net
gloshspasp01v.hgrs.holcim.net
lhim-qa.ea.holcim.net
hgrs-hbk-s0230.hgrs.holcim.net
holporsso-qa.holcim.net
vpn.au.holcim.net
nasnctxappd03.na.holcim.net
webmail02.ea.holcim.net
usa-dund1-ise3.na.holcim.net
nasnctxappd02.na.holcim.net
holcimconecta.ea.holcim.net
imperva.com
qlikview.na.holcim.net
NACTXP076.na.holcim.net
ita-webmail.ea.holcim.net
AP-SGS-SP901.in.holcim.net
hgrsuhep.hgrs.holcim.net
holq176.ea.holcim.net
qua-vpn.ap.holcim.net
AP-SGS-S5200.in.holcim.net
amanpmpinpd51.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
integration-immw.ea.holcim.net
esp-webmail.ea.holcim.net
AP-SGS-SP902.in.holcim.net
webmail.ea.holcim.net
integration-dmw.ea.holcim.net
hnaadc502.extqa.na.holcim.net
integration-bmw.ea.holcim.net
svk-webmail.ea.holcim.net
webmeetingmx.laseritsc.net
hanzappsdev.oc.holcim.net
AP-SGS-VH141.in.holcim.net
glossccappd03.hgrs.holcim.net
hanzapps.oc.holcim.net
qvwprod.ea.holcim.net
webmail05.ea.holcim.net
AP-SGS-SP902.in.holcim.net
apacsepm.ap.holcim.net
holporsso-qa.holcim.net
mail.au.holcim.net
HEAB-ITSC-A006.ap.holcim.net
hnaadc501.extqa.na.holcim.net
hnaadc501.ebusiness.na.holcim.net
nasnwfmwsqa02.na.holcim.net
svk-webstorage.ea.holcim.net
comms.oc.holcim.net
hnaadc501.ebusinessq.na.holcim.net
hnaadc502.ebusinessq.na.holcim.net
htsx-hbk-s1457.hgrs.holcim.net
esp-logis.ea.holcim.net
sysmon.hgrs.holcim.net
comms.oc.holcim.net

Certificate

The complete raw certificate details for gloshspasp01v.hgrs.holcim.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135495640656563601082034343056473556598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gloshspasp01v.hgrs.holcim.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893101396359012385044209319480674501458277036217206811968657737772467752519198061429857698529782905964304747375423572126917962257042874728523313439223568722177957899747478384378725744006705064265642586013818207830048065093065392206827975876940570708844321870338418041395072334275077906237752465785534345646015940497961583919387954226031127160510175553210731766117876240870605396443779645061206081205161706143227255455987498348566516006044955353464864466357981384672399415504565120156608084370154328214062553970137623305688753862276739500960384462575029226323857919095308632571324762752883700177855069597515262610681022952890046171800456270215924611113618800021559375168485840412776908707672247195968720972717704718170339699776133747436153149023271275744753221260507056458729714264719015663133997412285852069554646601764632978821146881155990901866856844462562601443904592892317961739001144367042496495489273185711552871334004117689509273983059442447104463564810317354929708457629340264459799596606534911511434590580319377711995133652662795626923212912772485266415886526343238523004593671147207951137467581499514360852195270626066070260142547046065635689589258573131982796624442447056451956510301689475437031958342435605232706552605273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							989898b6ea1d3de9999a16dd51ee8316d140ec1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gloshspasp01v.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloshspasp01v.hgrs.holcim.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005fc96edb37c9a6078cf30e27e8ce9788f496662a40048bed706fb282d70ebb9fdb845dc92dae73a963abf3aabf46313b07d1229fce0091be87f5dda60beb2dcfe63d021da244fb1f21ee455158f7b0ea69624e645b4b2b9ead84c285c399904174e67c62617edcb741f3c248dd841d207b9085ec4534f987ae0b69a50d1a669de224c5a8da2cbecf1f950f7c21e297748edca34dbde4902430c704e005aa12e47feba4461926d3b2b45528fa0684ed874a69eac7fbbb0781c057e0af3ff69c9fafeb0afe4215323d04da917687c3bcad14d08bfb3d769e8a93100744d9a71fdc9d62a70f7ce5d2bc300f8ce5fed1b2b09be5ac8764109c4824624744dfc1b591