ims-prod07.adobelogin.com

- Adobe Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:b6:68:56:a5:cb:d4:ea:13:6e:23:ed:cb:db:79:68 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Adobe Inc.

Organization: Adobe Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:b6:68:56:a5:cb:d4:ea:13:6e:23:ed:cb:db:79:68
Serial Number (int): 3605570255355370396193571724660013416
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 73:d4:9d:a5:28:8c:ac:c1:e6:00:dd:24:e1:b1:eb:af:ea:ac:fc:e1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e5:dd:f1:f4:3f:e7:d1:c6:bc:3f:f0:10:20:80:c2:53:f0:9b:8a:2d
Fingerprint (sha256): 62:a7:50:b0:c0:f2:17:15:f9:7d:e6:9c:bd:42:dc:15:46:66:7a:47:2b:75:21:5e:23:74:e9:fc:84:ad:da:75

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ims-prod07.adobelogin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ims-prod07.adobelogin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ims-prod07.adobelogin.com

Other certificates including the domain name adobelogin.com

(limited to 100 certificates)
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1-stg1.adobelogin.com
*.adobelogin.com
*.ims-dev3.adobelogin.com
*.adobelogin.com
monitoring.stage.adobelogin.com
monitoring-va6.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
*.dev.adobelogin.com
na1r-dev1.services.adobe.com
ims-na1.adobelogin.com
*.services.adobe.com
static-stg1.adobelogin.com
static.adobelogin.com
static.adobelogin.com
pps.adobelogin.com
*.adobelogin.com
*.dev.adobelogin.com
pps-dev.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1.adobelogin.com
static-stg1.adobelogin.com
monitoring-va6.stage.adobelogin.com
*.dev.adobelogin.com
*.dev.adobelogin.com
ims-prod01.adobelogin.com
ims-prod04.adobelogin.com
monitoring-va6.dev.adobelogin.com
pps-dev.adobelogin.com
monitoring-or2.stage.adobelogin.com
monitoring-sgp5.stage.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
dummy-or2.adobelogin.com
*.adobelogin.com
monitoring-irl1.dev.adobelogin.com
delegated.identity.adobe.com
*.adobelogin.com
ims-na1-origin.adobelogin.com
monitoring-or2.dev.adobelogin.com
*.dev.adobelogin.com
pps-stage.adobelogin.com
*.dev.adobelogin.com
static.adobelogin.com
monitoring-irl1.prod.adobelogin.com
ims-na1.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-irl1.dev.adobelogin.com
monitoring-va6.prod.adobelogin.com
ims-na1-stg1.adobelogin.com
static.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
static.adobelogin.com
static-stg1.adobelogin.com
dummy-or2.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-or2.stage.adobelogin.com
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1-stg1.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
monitoring.adobelogin.com
static-stg1.adobelogin.com
*.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
dummy-or2.adobelogin.com
*.dev.adobelogin.com
ims-na1-stg1.adobelogin.com
*.identity-stage.adobe.com
monitoring-sgp5.prod.adobelogin.com
*.identity-stage.adobe.com
*.adobelogin.com
static-stg1.adobelogin.com
static.adobelogin.com
*.identity-stage.adobe.com
ims-identity-stg1.adobelogin.com
monitoring-or2.stage.adobelogin.com
ims-na1-stg1.adobelogin.com
monitoring-or2.dev.adobelogin.com
*.adobelogin.com
*.dev.adobelogin.com
ims-na1-dev1.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-na1.adobelogin.com
*.adobelogin.com
ims-na1-stg1.adobelogin.com
ims-prod07.adobelogin.com
pps-stage.adobelogin.com
*.dev.adobelogin.com
*.services.adobe.com
ims-prod01.adobelogin.com

Certificate

The complete raw certificate details for ims-prod07.adobelogin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+dMkd8ScA2hoxVUhb91
5lJddT16EWnKZSxaEHMUv0Caw+7cJYTubfLulI5bf0gNA3wLT7ih+lyqBU0Ru/yX
wZPxAIq3mHsQGgkq4B051HRHKoMraffIpGsVE827WVkr8zH65Nn/b4LnIrpdxVrR
pmLx+LhTgbIxsqFlcCr7fX078I0IIOK4N6l+aTIOR3Pnyp22vW/VNNDmwqlCx32p
zGuuFaQSOnfFBUK1ZO1ET8HwJhhx68cMhadSWSOqpSrwkanQmI/D8wL4WTRK887n
tEuhc1Z/4Lg8IGq6mDC51HWHasEpYTWFLv3XWJG8j0hn4aw2DdYLnw/HPvAan7gH
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3605570255355370396193571724660013416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ims-prod07.adobelogin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26245386965582567664428543005697219375322001754757161648267839338416910573064408276159695721689295199923773810555316417434359137365225519409063713562347693633167459198580877322234610046456390672942055978545835993231039798291059913165735862717210926444700758257195388651630632017344202691883520846533244385560918767196777471233798738617537130318983157525238994377345131432445170758528337984874788245017379460631797103799134342115025981944448212272184886318092519512984815095042288119416238027207475837781066605476068153637069573423971242467496421433116745465239791139975995394736991286571422878770659295585549489276881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73d49da5288cacc1e600dd24e1b1ebafeaacfce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims-prod07.adobelogin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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