datamodel.wcoomd.org

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 20:27:8e:ce:37:14:ae:f6:4f:88:5e:4d:54:c8:aa:c2 was issued on by SSL Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=datamodel.wcoomd.org

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:27:8e:ce:37:14:ae:f6:4f:88:5e:4d:54:c8:aa:c2
Serial Number (int): 42740691882812042978052527091777841858
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3b:ba:b8:94:1a:33:50:7d:f5:1e:b5:53:44:8d:fd:de:48:d2:ac:b1
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): db:96:5e:f9:d7:2b:05:35:f4:16:1d:37:4d:25:1a:10:3f:f4:72:e8
Fingerprint (sha256): 4b:7d:e7:d3:03:80:32:33:f7:6c:4a:d6:19:ef:0f:4a:92:20:d1:4f:03:d0:58:22:1c:8b:c4:60:18:40:57:ca

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate datamodel.wcoomd.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datamodel.wcoomd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datamodel.wcoomd.org
datamodelsocket.wcoomd.org
dmapi.wcoomd.org
wiki.datamodel.wcoomd.org

Other certificates including the domain name wcoomd.org

(limited to 100 certificates)
helpdesk.unitedwarehouse.com
servicedesk.mastercall.org.uk
academy.wcoomd.org
servicedesk.mastercall.org.uk
clikc.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
mag.wcoomd.org
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
preprod-rammap.wcoomd.org
helpdesk.nwtc.edu
mag.wcoomd.org
tls.automattic.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
mag.wcoomd.org
mag.wcoomd.org
clikc.wcoomd.org
clikc.wcoomd.org
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
academy.wcoomd.org
accounts.wcoomd.org
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
clikc.wcoomd.org
servicedesk.mastercall.org.uk
mediaserver.wcoomd.org
academy.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
academy.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
*.wcoomd.org
*.wcoomd.org
accounts.wcoomd.org
datamodel.wcoomd.org
helpdesk.abxpackaging.com
servicedesk.mastercall.org.uk
academy.wcoomd.org
servicedesk.mastercall.org.uk
tls.automattic.com
helpdesk.abxpackaging.com
academy.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
clikc.wcoomd.org
mag.wcoomd.org
support.nbhandy.com
support.mycaravelautism.com
servicedesk.mastercall.org.uk
mag.wcoomd.org
support.nbhandy.com
mag.wcoomd.org
helpdesk.wcoomd.org
academy.wcoomd.org
cm.helpdesk.carimed.com
mag.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
academy.wcoomd.org
*.wcoomd.org
servicedesk.mastercall.org.uk
mag.wcoomd.org
helpdesk.nwtc.edu
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
academy.wcoomd.org
academy.wcoomd.org
servicedesk.mastercall.org.uk
iot-helpdesk.dtgo.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
academy.wcoomd.org
ithelp.mainecc.edu
sd.globalrateset.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
academy.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
helpdesk.wcoomd.org
support.mycaravelautism.com
academy.wcoomd.org
servicedesk.mastercall.org.uk
*.wcoomd.org
servicedesk.mastercall.org.uk
mag.wcoomd.org
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
*.wcoomd.org
*.wcoomd.org

Certificate

The complete raw certificate details for datamodel.wcoomd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73PjN6r6uZiGEkHT6Yg
lT4i7puXKDHf6r1ybqZWndDIgDHhgUk9MhaNL9g7fYZfbKeuAgvqLfUq0C4R7Ew5
/lYXVo0+A+Im18m3HIepGX9ITw1XHp8xobecHI1s2GCy7zPNR4SAHKRpvsbt/sEN
W9jh6mzW30XnTAl9y7vcQhRDHpQanWARwXh9Nq/ZfeI8IDIw9juCR9EnCo4YqFyP
f47egHUU+A+7ZBg/E/ZzdE82s9GNVMtarFR+PyNX4NNBELRwtOdgwywS7i8NmxJ+
BfezjHJOVwsc91ZqwOw0Ks3Jr+HrW2CvMZQsj5NuQb4VKgNPYFXEemW9m3AnKOKx
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42740691882812042978052527091777841858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 07:24:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 07:24:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'datamodel.wcoomd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24710068634368041018067086931042102113865633788205817483682004081719106024559218568628452303635319765378089960015476736499983230894371512691122945357734203682387686882677463407023612073690513751128027342482886909182073899501211012018259989517213531948220593962763719257099033890164450791488538489993711154091560483132050356141932310422873348224366703717997975839320816468183807142126598592692408733831104473733998688309612937234692326206960585585309668101748333641981338443208909951498713055238290610577125108925852055590129918544101289093636337699961339139890651320029530428281947965029675419138014879417130421498221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamodel.wcoomd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamodelsocket.wcoomd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmapi.wcoomd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.datamodel.wcoomd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bbab8941a33507df51eb553448dfdde48d2acb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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