corp.hammerson.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:71:e9:69:d2:dc:c5:c0:95:a4:6f:68:de:b8:f8:e5:c4 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=corp.hammerson.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7f:71:e9:69:d2:dc:c5:c0:95:a4:6f:68:de:b8:f8:e5:c4
Serial Number (int): 304704133109290907189618695243466454656452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:b1:60:9e:fa:81:ab:12:e3:63:92:a2:00:85:c3:c2:9c:a4:d8:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:76:de:2f:c5:02:7e:77:af:be:e2:87:be:c8:86:e9:aa:cd:9e:68
Fingerprint (sha256): 6f:aa:cb:c6:b7:92:24:17:a8:af:be:d2:80:96:0d:19:09:46:cd:b5:81:d0:a4:5c:02:0a:86:5a:ee:94:51:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate corp.hammerson.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corp.hammerson.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corp.hammerson.com

Other certificates including the domain name hammerson.com

(limited to 100 certificates)
*.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
hamexpedge001.hammerson.com
mail.hammerson.com
hamexpedge001.hammerson.com
hamexpedge001.hammerson.com
*.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
pwreset.hammerson.com
hamexpedge001.hammerson.com
pwreset.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
email.hammerson.com
pwreset.hammerson.com
pwreset.hammerson.com
itportal.hammerson.com
*.hammerson.com
fs.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
corp.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
fs.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
portal.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
portal.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
corp.hammerson.com
portal.hammerson.com
portal.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
san-4-s51.tlsprovisioning.exacttarget.com
itportal.hammerson.com
selfservice.hammerson.com
portal.hammerson.com
portal2.hammerson.com
*.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
portal2.hammerson.com
itportal.hammerson.com
pwreset.hammerson.com
email.hammerson.com
pwreset.hammerson.com
agresso.hammerson.com
mail.hammerson.com
email.hammerson.com
*.hammerson.com
portal2.hammerson.com
email.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
mail.hammerson.com
mail.hammerson.com
agresso.hammerson.com
email.hammerson.com
fs.hammerson.com
email.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
portal2.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
itportal.hammerson.com
hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
*.hammerson.com
hamexpedge001.hammerson.com
hammerson.com
email.hammerson.com
portal.hammerson.com
itportal.hammerson.com
email.hammerson.com
leadinglights.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
portal2.hammerson.com
fs.hammerson.com
portal.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
*.hammerson.com
mail.hammerson.com
*.hammerson.com
san-4-s51.tlsprovisioning.exacttarget.com
hamexpedge001.hammerson.com

Certificate

The complete raw certificate details for corp.hammerson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE531TuaOipJUW0sO2P9lyd9tHlEtR
DUIckBnMb8DDPo1Rj3T1QZEaqINX45mIPsEYL/n31Y0ZyRsu/P0rInbm4g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304704133109290907189618695243466454656452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 14:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 14:24:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corp.hammerson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e77d53b9a3a2a49516d2c3b63fd97277db47944b510d421c9019cc6fc0c33e8d518f74f541911aa88357e399883ec1182ff9f7d58d19c91b2efcfd2b2276e6e2
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ab1609efa81ab12e36392a20085c3c29ca4d8d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.hammerson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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