api-portal.softwareone.cloud

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:bd:68:70:69:32:5b:98:71:f5:d0:a1:54:5c:f8:42 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-portal.softwareone.cloud

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:bd:68:70:69:32:5b:98:71:f5:d0:a1:54:5c:f8:42
Serial Number (int): 16934198332391859137656552423950186562
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 35:90:90:fa:47:2f:d2:28:b8:00:d1:81:76:58:dc:3e:c8:28:fd:ef
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 2d:64:03:4b:2a:df:88:1b:86:be:15:0f:e9:f4:72:9b:6e:5b:63:b2
Fingerprint (sha256): 75:b0:f0:44:14:a2:d3:70:5f:5b:91:89:c0:15:28:7b:16:5f:31:68:10:b8:b0:cb:7f:08:b2:67:1c:5d:0f:5a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate api-portal.softwareone.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-portal.softwareone.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-portal.softwareone.cloud

Other certificates including the domain name softwareone.cloud

(limited to 100 certificates)
monitoring.millennia.cloud
status.chaosgroup.com
monitoring.millennia.cloud
status.configcat.com
monitoring.millennia.cloud
monitoring.millennia.cloud
itsm-api.sap.softwareone.cloud
status.chaosgroup.com
update.softwareone.cloud
status.opa.ba
status.chaosgroup.com
porinimon.porini.it
monitoring.millennia.cloud
monitoring.millennia.cloud
*.di.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
porinimon.porini.it
monitor.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
api-portal.softwareone.cloud
status.chaosgroup.com
*.softwareone.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
*.softwareone.cloud
status.chaosgroup.com
monitoring.millennia.cloud
monitoring.millennia.cloud
testsite247.dynu.net
rmm.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
demo.webmon24x7.eu
monitoring.millennia.cloud
dashboard.flipkick.cloud
monitoring.millennia.cloud
*.slm.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
*.softwareone.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud
statuspage.siteflow.app
api.softwareone.cloud
monitoring.millennia.cloud
*.softwareone.cloud
monitoring.millennia.cloud
isitup.vit4u.co.uk
monitoring.millennia.cloud
monitoring.millennia.cloud
monitoring.millennia.cloud

Certificate

The complete raw certificate details for api-portal.softwareone.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkvpXB5JIL8mC7STp9t2
cbkJqmJAdQxp3a+x4CPCXXjmEkqPy3vQ+MHpr7PN+H5T23hshPC1fq4z4gRwE0kc
4jknMnczKPyfKSs4yqx+2CGvC7huJSPG6mxvk0jiDe6H90WaUKQirK6fAhO/ICr1
SNeTwOvfDJkweo+jE5NuYZv3XuRMYhlVYiX2D5R6XpwaDqI7EMaSUhMpj1D4hleM
PcHpaBJRNL7a6BCaAcX0AXJqoPde6UFezdfEs6r3z3bhdcB2SjHNsyzl5uTroIzu
rw2I5SfT6LD1YvD1Tb550IHY9mgo4Ut60h0PjeClUILwfxjv8GOxygjpaGpcw8Pd
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16934198332391859137656552423950186562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-portal.softwareone.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24022711329867572210981555207707290187106496801314817582922520651105787364862282517096415803762412099841725913208659237274335569357525283305604067462933608962356335240567811434293775241575385829694443103578463645927701554883504645500686690708920473177324360900828812137704570211706620777008681479164072767935458794402736896697047587901429341693100170551316984054589608002052883852159665987988326521621143933624305241589859162266467563304439935942896264452467032342654667831560866833989278604444029321828397533205738600925490812972536810575843810576941250409202448805387317076406839139963442478647641588005113528835561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							359090fa472fd228b800d1817658dc3ec828fdef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-portal.softwareone.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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