breastpumps.byramhealthcare.com

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:0a:12:21:50:b0:4e:18:2a:c8:01:88:ce:f4:8d:fa was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:0a:12:21:50:b0:4e:18:2a:c8:01:88:ce:f4:8d:fa
Serial Number (int): 8027658666169012734848936428568874490
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 46:99:70:fc:b1:71:56:2c:c2:e3:f2:f7:98:ed:cb:dd:47:71:c3:e9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e9:a4:2a:a5:66:e8:3b:d1:9d:46:68:07:d0:28:49:ad:f3:4a:41:b0
Fingerprint (sha256): 4e:2f:76:5a:ef:40:94:69:0e:5e:55:70:63:70:39:8c:18:08:e2:a2:a3:8c:f9:ac:f0:48:0a:2e:a7:0c:32:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate breastpumps.byramhealthcare.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for breastpumps.byramhealthcare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

breastpumps.byramhealthcare.com

Other certificates including the domain name byramhealthcare.com

(limited to 100 certificates)
*.byramhealthcare.com
vnsdl.byramhealthcare.com
scalix.byramhealthcare.com
*.byramhealthcare.com
sts.byramhealthcare.com
mbyrlyncedge.byramhealthcare.com
www.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
outlook.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
www.byramhealthcare.com
zimbra.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
voltage-pp-0000.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
breastpumps.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
BYRAM-EXPC1-P.byramhealthcare.com
BYRAM-EXPE1-P.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
securemail.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
mbyrlyncedge.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
secureit.byramhealthcare.com
*.byramhealthcare.com
mbyrfewebext.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
sts.byramhealthcare.com
*.byramhealthcare.com
enroll.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
vnsdl.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com
www.byramhealthcare.com
*.byramhealthcare.com

Certificate

The complete raw certificate details for breastpumps.byramhealthcare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr9R9hhKSpUOrTN4Ys8U
JTR0DDl8MejZo0DJmXL9vks8isLqWIDC823GDVBws7toJSb+ybWinHRVEBN6EmBF
teQWdE81b7Gc6Oio0Y6iHpXWZDzlZ8PNlMRBV25AyqX8c2e/8laB4F8NJuj5DRjo
gviyRG97BMHhevMzvf3n3DCsiZR8JEc1WyUE7LUx9qKq2Ej+i99hEr5R1ovEE9TU
hYUJt8b2/2trAa+A75IJp/UT9Yyv/HmTdcamloHx0yate+eJXudNZRPcdsqce83t
ysp65dFv3LSbt+TGD0r5iuYUl+5MNwfPG1ENMqWykeDG6sk56tHT4XdFBdDhOtv9
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8027658666169012734848936428568874490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'breastpumps.byramhealthcare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25594481090940360808592711912171168853766485669469127603903708467735802099985531317196841961061200601137534986023521923053667683135127303579735296268955545125200406823884367443811930168373650135730124928603526018479331130536802892185972046456683498837980136481232411300064558975439834792180644744827913322536141004434400634166264047522974567275328985391651846721235498149999522160790972904854055493239129653520467603681331172912318854166574053275177606728549142380610254958766463960398200346031274169942307068327005629495767962804262560820984666242647852404962903610063414806397155922251601121719780010407515121253773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							469970fcb171562cc2e3f2f798edcbdd4771c3e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breastpumps.byramhealthcare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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