supply.nissan-ix.com

- Nissan Motor Co. Ltd. -

Issued by Verizon Public SureServer CA G14-SHA1

About this certificate

This digital certificate with serial number 74:05:81:0f:31:dd:4b:b5:55:5d:13:30:38:34:78:52:41:ec:e2:39 was issued on by Verizon Enterprise Solutions.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Nissan Motor Co. Ltd.

Organization: Nissan Motor Co. Ltd.
Organization unit: Supply Chain Management
State / Province: TN
Locality: Franklin
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 74:05:81:0f:31:dd:4b:b5:55:5d:13:30:38:34:78:52:41:ec:e2:39
Serial Number (int): 662365675796959943759280245035397985072631833145
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 34:22:86:f4:32:c8:83:99:cc:59:5c:47:9b:87:a2:db:37:e3:65:49
AuthorityKeyId: 59:f2:58:56:95:5e:42:6b:3f:5d:18:d3:01:62:83:26:b6:a1:94:5e

Fingerprint (sha1): 8c:52:94:cf:8a:06:29:ef:e2:05:20:ec:ad:e9:a3:fc:7b:1f:51:61
Fingerprint (sha256): 5a:8a:50:51:e8:06:b9:3c:3a:1e:9a:ad:40:02:f0:6f:7f:27:cc:56:f0:fc:b7:45:ad:44:01:a5:78:7b:74:f8

Issuing Certificate URL: https://cacert.omniroot.com/vpssg141.crt
Issuing Certificate URL: https://cacert.omniroot.com/vpssg141.der

Revocation information

OCSP Server: http://vpssg141.ocsp.omniroot.com
CRL Distribution Point: http://vpssg141.crl.omniroot.com/vpssg141.crl

Check the revocation status for certificate supply.nissan-ix.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supply.nissan-ix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

supply.nissan-ix.com
www.supply.nissan-ix.com

Other certificates including the domain name nissan-ix.com

(limited to 100 certificates)
sslmail2.nissan-ix.com
DealerComm.Stage.Nissan-IX.com
supply.stage.nissan-ix.com
sslmail1.nissan-ix.com
redirector.nissan-ix.com
share-ext.nissan-ix.com
dbsdms.extranet.nissan-ix.com
wps.nissan-ix.com
dbsdms.certperf.extranet.nissan-ix.com
web3270.nissan-ix.com
dbsdms.extranet.nissan-ix.com
dbsdms.dev.extranet.nissan-ix.com
dbsdms.dev.extranet.nissan-ix.com
web3270.nissan-ix.com
web3270.nissan-ix.com
www.supply.nissan-ix.com
www.supply.nissan-ix.com
supply.dev.nissan-ix.com
redirector.nissan-ix.com
dbsdms.dev.extranet.nissan-ix.com
www.supply.nissan-ix.com
web3270.nissan-ix.com
dbsdms.uat.extranet.nissan-ix.com
supply.nissan-ix.com
dbsdms.stage.extranet.nissan-ix.com
supply.nissan-ix.com
DealerComm.extranet.nissan-ix.com
dbsdms.extranet.nissan-ix.com
web3270.nissan-ix.com
dbsdms.stage.extranet.nissan-ix.com
share-ext.nissan-ix.com
redirector.nnanet.com
dbsdms.certperf.extranet.nissan-ix.com
supply.nissan-ix.com
web3270.nissan-ix.com
DealerComm.extranet.nissan-ix.com
DealerComm.extranet.nissan-ix.com
WEB3270.NISSAN-IX.COM
stg-dc-002.stage.nissan-ix.com
dcw.extranet.nissan-ix.com
wps.qa.nissan-ix.com
supply.nissan-ix.com
dbsdms.extranet.nissan-ix.com
techlink.nissan-ix.com
dbsdms.certperf.extranet.nissan-ix.com
techlink.nissan-ix.com
DealerComm.Stage.Nissan-IX.com
dcw.extranet.nissan-ix.com
wps.qa.nissan-ix.com
dcw.extranet.nissan-ix.com
ea.nissan-ix.com
dbsdms.uat.extranet.nissan-ix.com
www.supply.nissan-ix.com
redirector.nnanet.com
www.supply.nissan-ix.com
dcw.extranet.nissan-ix.com
share.nissan-ix.com
wps.nissan-ix.com
WEB3270.NISSAN-IX.COM
dcw.extranet.nissan-ix.com
techlink.nissan-ix.com
redirector.nissan-ix.com
wps.qa.nissan-ix.com

Certificate

The complete raw certificate details for supply.nissan-ix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ED3CrKc3WfvSwVs4R5
cAoNqG/tbnnQgaMB1CWSe0hjKsrODGxpt78KbJwPFv2oKKE9onKRGaHyKWiIWEME
xQuZA2Jmv+PCrbqyTCWa+hYIeRhSz3KExwWJKXtA0Pb+hNKb9NzDXBOljPTCOMkJ
KSVinLIEXdGm1F0wsQe5lm25aCkKXaW4p/tmzVU25BvxogZoHGbEvb2X+G9oQmVP
+6giUXTyUXNWdyW4Iz8og6oiEUcMhLwjxamP0dvrbvYmXCso7KnbD50u7FDN7jgh
A+RcNJqGtXggD5/9HgZs7VeJ+FZOr5rUdko0DQGcuqpQROGua/ym5ocRVW6VabzI
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 662365675796959943759280245035397985072631833145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Public SureServer CA G14-SHA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-12 14:12:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-10 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Franklin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissan Motor Co. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Supply Chain Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supply.nissan-ix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23196789091246412308930581276330134486036944884919547306523326639914414361416076698402419627491028766647219327928179984903842589916386336961409378731229057978912319486577740220729540307513982451840946976501595234184038075135680299683091010466447706256870847062522314034890296057316147793147878946288772314080295496282754642168012839586227263633623612355940361956084820683218011598296169836267715666187639374922172929988656971718424179326985471600995445138112827082179230479794338860568884943279278639402804852743216334291336475903480862196555461300032605207445295314279530346382029638668997104878392462409663671748811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg141.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg141.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.omniroot.com/vpssg141.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supply.nissan-ix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supply.nissan-ix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59f25856955e426b3f5d18d301628326b6a1945e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vpssg141.crl.omniroot.com/vpssg141.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							342286f432c88399cc595c479b87a2db37e36549
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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