login.identity.engenoil.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:be:26:c8:ca:05:86:17:52:32:fe:89:44:db:5b:2b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=login.identity.engenoil.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:be:26:c8:ca:05:86:17:52:32:fe:89:44:db:5b:2b
Serial Number (int): 15608830996475783308022972251496995627
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:76:5d:f3:9f:87:ae:1c:86:bb:9b:a8:e3:8a:76:ce:bb:e3:13:a2
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): aa:96:31:cb:8c:73:50:6a:a5:70:c5:26:28:3c:9a:87:17:cb:6c:b2
Fingerprint (sha256): 45:1a:12:5a:f4:8b:ea:2e:3a:bd:d6:1b:22:f6:58:53:0d:a9:dd:cd:b2:35:c4:77:43:54:39:8f:9a:e0:51:f8

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate login.identity.engenoil.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.identity.engenoil.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.identity.engenoil.com

Other certificates including the domain name engenoil.com

(limited to 100 certificates)
*.engenoil.com
connect.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
careers.engenoil.com
MessageBrokerqa.engenoil.com
*.engenoil.com
Mobile.engenoil.com
ACWC.engenoil.com
Mobile.engenoil.com
careers.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
login.identity.engenoil.com
boardpad.engenoil.com
secure.engenoil.com
Mobile.engenoil.com
connect.engenoil.com
1card.engenoil.com
esbprod.engenoil.com
sts.engenoil.com
rms.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
esbqa.engenoil.com
sip.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
Mobile.engenoil.com
mobile.engenoil.com
wac.engenoil.com
sip.engenoil.com
sip.engenoil.com
sts.engenoil.com
sip.engenoil.com
careers.engenoil.com
*.engenoil.com
Mobile.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sfbweb-ext.engenoil.com
sfbweb-ext.engenoil.com
MessageBrokerprod.engenoil.com
rp.engenoil.com
*.engenoil.com
*.engenoil.com
Mobile.engenoil.com
sip.engenoil.com
sts.engenoil.com
secure.engenoil.com
MessageBrokerprod.engenoil.com
MessageBrokerQA.engenoil.com
sip.engenoil.com
wac.engenoil.com
esbdev.engenoil.com
sip.engenoil.com
*.engenoil.com
web-ext.engenoil.com

Certificate

The complete raw certificate details for login.identity.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xur0L3j94Ukrf+82hl5
g4VHscxZ36bdUCEK0z7O5AxYdoTdZTLZQSGST0h//Z7TdLZf76PRnkXHuoijrR6k
iMU0ZrNVVc3fpy9yB/3T4aX07akvGOoQ99PFq9BibLtwpbXwXQSEwX/BY9zoSPwZ
QMoT2CSkJ1Ey6J186vKzdhX71wSP5h1YWyEl22N/2fN0eTcrPoC1xk0QmKjyUkkf
CsuB0YvSd4TRO/hPODjq0GF3g1/E5PHl3ouvCZvMm5NB69oJlrX4oPD3q06i/BNp
6SQ3IxoFpC87Gs8/KWZQCicpAcE+vz5KET73sdu3Flxu3ZJtzzQgBkC04G2bwMQM
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15608830996475783308022972251496995627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.identity.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28464603136273691100593155093894721747586803215536255121835886636554032833398804097784343900563207829924340106486839019331692852375434155893958262895094125337481255674642653779050539573457969847790415022926032713413868929242218645351875542220656453228677577397676608825695208189737707644967562747416646967170528406830266068363177073222763003621527069219595354154763778956770450098093164019713447354605002609466021349459982906008898971981602061822273407983052575814133018897382794748901540217004627236538497574429451060729869964923554700876632461744432784119324829986692804960257631424742242756183547512750112292211789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10765df39f87ae1c86bb9ba8e38a76cebbe313a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.identity.engenoil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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