api-onpremise-qa.dsm.com

- DSM Group Business Services BV -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 76:90:91:52:b2:ad:00:2c:00:00:00:00:50:f3:d7:03 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DSM Group Business Services BV

Organization: DSM Group Business Services BV
Locality: Heerlen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:90:91:52:b2:ad:00:2c:00:00:00:00:50:f3:d7:03
Serial Number (int): 157599541751648420569694271931342378755
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 31:fd:18:de:da:b7:f6:05:09:91:63:a1:49:ba:e9:85:e9:1b:da:3b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ef:c2:79:c4:b6:ae:cf:f4:aa:eb:db:0c:96:d9:60:9b:c7:87:a0:b5
Fingerprint (sha256): 4d:72:17:0c:fc:dd:1f:3b:f0:1e:5f:a4:9d:06:a7:65:f9:e5:c9:84:2d:67:7e:b1:14:f7:40:4d:ea:d3:bc:0e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate api-onpremise-qa.dsm.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-onpremise-qa.dsm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-onpremise-qa.dsm.com
nlxdsmcv85.srvfarm4-eur.dsm-group.com
nlxdsmcv86.srvfarm4-eur.dsm-group.com

Other certificates including the domain name dsm.com

(limited to 100 certificates)
wcm.qa.dsm.com
www.dsm.com
www.dsm.com
nutritionportal.dsm.com
emea-access.dsm.com
test.cgi.dsm.com
dsm-wd.dsm.com
www.dsm.com
*.eightfold.ai
dsmintegrationcloudqa.dsm.com
technicaldocuments.dsm.com
dsm.CRMQA.dsm.com
wcm.test.dsm.com
newsletter.dsm.com
engineerconnect.dsm.com
www.dsm.com
amec-web-ext.dsm.com
www.rfq-dmsc.dsm.com
virtualweb.dsm.com
apac-access.dsm.com
jaedtest.dsm.com
*.eightfold.ai
technicaldocuments.dsm.com
www-qa.dsm.com
virtuadeskchina.dsm.com
testproxy.dsm.com
dsm.com
topview.dsm.com
b2b.dsm.com
technicaldocuments.dsm.com
dsmintegrationcloud.dsm.com
emea-access.dsm.com
technicaldocuments.dsm.com
virtualweb.dsm.com
tb.analytics.dsm.com
delvo-analytics.dsm.com
dsm.com
mytoolbox.dsm.com
Shanghaida.dsm.com
www.dsm.com
dsm.CRM.dsm.com
webshop.dsm.com
meerbuschda.dsm.com
dsmintegrationcloudqa.dsm.com
dsm.com
testreplace.dsm.com
webservice-qa.dsm.com
testreplace.dsm.com
virtuadesk.dsm.com
mysupport.dsm.com
testev.dsm.com
dsm.com
LWPVPN.DSM.COM
engineerconnect.dsm.com
webservice-qa.dsm.com
*.eightfold.ai
lsrp.dsm.com
ftebudgeting-test.dsm.com
demo12.dsm.com
api-onpremise.dsm.com
*.dsm.com
wcm.dsm.com
insights4.dsm.com
join.dsm.com
webconf.dsm.com
ra.dsm.com
webservice-dev.dsm.com
wcm.qa.dsm.com
ftebudgeting.dsm.com
api-onpremise.dsm.com
testdsm.dsm.com
*.eightfold.ai
dsm-wda.dsm.com
idm.dsm.com
ultracalculator.dsm.com
testSAN1.dsm.com
sonarqube.dt.foundation.snr.dsm.com
virtualweb.dsm.com
dsm.com
*.eightfold.ai
notifyiris.dsm.com
teamroom.dsm.com
sbc802.dsm.com
webshop.dsm.com
myotherhostname.dsm.com
myotherhostname.dsm.com
virtualweb.dsm.com
*.eightfold.ai
brains.dsm.com
brains.dsm.com
test.dsm.com
newsletter.dsm.com
virtualweb.dsm.com
dsm.com
delvo-analytics.dsm.com
mysupport.dsm.com
webshop.dsm.com
*.eightfold.ai
buildserver.qa.dsm.com
depmdac.dsm.com

Certificate

The complete raw certificate details for api-onpremise-qa.dsm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPBbAxcKBxpRjjHqkX4
Kt3uu+UGgd6UHs2DhKJPOJMZhzOj8g3+P5uYudVT4ZM4O7YUyQgRjC1eENtzVxLv
IPqW2Mx5RBVun5BpRNcTWvnvNRT5XAJgdc3yGFkBZfyLjeFRx4Nl2crO9GPsS0tx
g9gI8VKPw/lbb2/aUSmyWbQggctyzsrR6ThnTPmXjsH00VKr+O2MHyj7WV5SbT7G
z0JxCW76z4XxjpKSAzwxAFPe4FZ6fx16wEU1gY13sbXjzCewfS9Sd9gV5ANuplzt
uqrSaSejC443BW6K7X/Uk6u6LjDwMd6rOz0s/joZo/vHYP75HmCr7YvWlP0CczkT
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157599541751648420569694271931342378755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 13:09:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-02 13:39:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heerlen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSM Group Business Services BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-onpremise-qa.dsm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22282912759670748756991097904714708614738661459803374625584194385587528421440469440346541727854497834636707092194317135197849988807748256014529190966971635217571433021156558063975714240968002590138470816410106856900950056001131019211431081987766737202388032074204253302601531224129517477162929706923103850417167414969933483712951321460640026844107621878900410219961778416746215171621614115597665557862112754658669207490699782848862538471947394236918936111610203961138123676061018499477832188031589765155449326725550852334832860224835096251745107434886108610000166154792584214295370470592312404710177191273342510371629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-onpremise-qa.dsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxdsmcv85.srvfarm4-eur.dsm-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlxdsmcv86.srvfarm4-eur.dsm-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31fd18dedab7f605099163a149bae985e91bda3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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