api.opower.com

- Opower -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 09:d6:4e:b9:dc:89:1d:8c:96:3d:1e:97:d3:3c:17:0c was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Opower

Organization: Opower
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d6:4e:b9:dc:89:1d:8c:96:3d:1e:97:d3:3c:17:0c
Serial Number (int): 13075800243202310477816448020343691020
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:8c:04:c7:ed:af:96:f2:be:14:aa:ae:5c:d4:23:11:ba:87:f1:6c
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 2c:92:a0:de:ed:c9:93:5a:03:29:ff:15:a9:84:76:8d:85:04:71:d4
Fingerprint (sha256): 5e:98:20:c3:f7:02:6a:82:20:30:63:55:d3:6c:61:23:59:80:10:1f:06:cb:e8:01:61:60:99:2e:0f:0b:eb:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g5.crl

Check the revocation status for certificate api.opower.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.opower.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.opower.com
api-dev.opower.com
api-extdev.opower.com
api-extqa.opower.com
api-qa.opower.com
api-stage.opower.com

Other certificates including the domain name opower.com

(limited to 100 certificates)
analytics-support.opower.com
www-legacy.oracle.com
static-content.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy.oracle.com
*.opower.com
analytics-support.opower.com
home-energy-report-content-stage.opower.com
analytics-support.opower.com
sso.opower.com
e-bill-content-dev.opower.com
home-energy-report-content.opower.com
demo.dss.opower.com
www-legacy.oracle.com
*.opower.com
sso2.opower.com
proxmox-3201.on.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy-4.oracle.com
www-legacy.oracle.com
remote.opower.com
www-legacy.oracle.com
cxapi-tlslegacy-ca-stage.opower.com
opower.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy-4.oracle.com
www-legacy.oracle.com
www-legacy.oracle.com
home-energy-report-content.opower.com
digital-asset.opower.com
remote.opower.com
api.opower.com
proto.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
wiki.opower.com
prod-smtp-us-east.opower.com
www-legacy.oracle.com
inside.on.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy-4.oracle.com
weekly-ami-email-prod.opower.com
www-legacy.oracle.com
inside.on.opower.com
home-energy-report-content-stage.opower.com
www-legacy.oracle.com
remote.opower.com
sso2-stage.opower.com
static-content.opower.com
home-energy-report-content-dev.opower.com
www-legacy-4.oracle.com
www-legacy.oracle.com
adfs.opower.com
www-legacy.oracle.com
adfs.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
bls-email-dev.opower.com
bls-email-prod.opower.com
stage-portal-nes.dss.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
www-legacy.oracle.com
nextweb-static.opower.com
www-legacy.oracle.com
nextweb-static-dev.opower.com
nextweb-static.opower.com
api.opower.com
ticket.opower.com
e-bill-content-prod.opower.com
cxapi-tlslegacy-ca-stage.opower.com
api.opower.com
prod-smtp-canada.opower.com
vpn-us-west-arin.opower.com
dev-spacewalk.iad.opower.it
e-bill-dev.opower.com
static-content.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
weekly-ami-email-dev.opower.com
www-legacy.oracle.com
weekly-ami-email-qa.opower.com
*.opower.com
api.opower.com
cxapi.opower.com
www-legacy.oracle.com
www-legacy.oracle.com
vpn.opower.com
ticket.opower.com
wiki.opower.com
kiteworks.iad.opower.it
www-legacy.oracle.com
www-legacy.oracle.com
prod-smtp-us-east.opower.com

Certificate

The complete raw certificate details for api.opower.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6nFhSlor/T0C3qDO3b4
/rmqxNhbaGJYXp8Wn/B7qA+wD/nepmP4cnszP0AKfBoT3ZuGb97Y/+h0sDCSMSyB
k1aBfQJU9+x7YWa3vuyIMgQSgXtBd5NnfoT0ssv0kUEQhGJGOjU00DqLg9BEGYJt
hZQVsqUUMprpogKs7pYP6JladQfcxKEw5gRo4Gnn5gXFr351OtBYVv7PYr03xMdl
zm+bcI/9g+9jbvaegUCwOteae23k1C2SdG9RJXdmUVzNsBVH/R4ypFFdMyqHSN6t
YtpLwTstxIo1eWrjyKhYNfki/xaqXBNf23AtI3caK8AnTFTojjChBVeef/1mAGdS
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13075800243202310477816448020343691020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Opower'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.opower.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22175420847036301824060913623909271398399178836255196121071314298079131005219122406910700724965002451874088314087854374307413741388410051327362856241998631287438567582126913019337274550553789175099883343163735273392022137841778639000964346840422986517128234295897645865918945311794966864009676459526322236815844071599256437063366753095269399198634344215800906031518792406309926929373835782529572101815308284640141645593238197352388759442210054841562193136196631003686209463788969036618881316953060802786571095155247771344508321706683782187936255526303182336474218185099791961024721432362649881122862009633708490314361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f8c04c7edaf96f2be14aaae5cd42311ba87f16c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.opower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.opower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-extdev.opower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-extqa.opower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa.opower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stage.opower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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