kmportal.suzlon.com

- Suzlon Energy Ltd -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:59:07:4e:0b:09:56:47:9f:04:53:f6:50:8f:ab:b1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Suzlon Energy Ltd

Organization: Suzlon Energy Ltd
State / Province: Ahmadabad
Locality: Navrangpura
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:59:07:4e:0b:09:56:47:9f:04:53:f6:50:8f:ab:b1
Serial Number (int): 8437630555198619455779415572897311665
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:75:cf:ca:b6:3c:ae:d8:f0:45:2a:15:9a:7e:9e:79:f1:19:75:75
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 27:b7:7c:4e:50:63:a2:be:82:6d:75:49:62:e0:36:d8:a9:c4:b3:c8
Fingerprint (sha256): 7c:ab:16:dc:02:46:de:05:bb:75:69:15:ca:a4:03:72:85:64:b8:2e:c6:64:51:e0:28:03:68:08:40:cf:7c:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate kmportal.suzlon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kmportal.suzlon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kmportal.suzlon.com

Other certificates including the domain name suzlon.com

(limited to 100 certificates)
scada.suzlon.com
webcontent.suzlon.com
ssd.suzlon.com
scada.suzlon.com
dcm.suzlon.com
scada.suzlon.com
scadaind.suzlon.com
mdm.suzlon.com
corpftp.suzlon.com
lyncweb13.suzlon.com
scmqd.suzlon.com
hseportal.suzlon.com
seasportal.suzlon.com
crms.suzlon.com
webmail.suzlon.com
*.suzlon.com
*.suzlon.com
ncrport.suzlon.com
limbs.suzlon.com
ssd.suzlon.com
*.suzlon.com
SELPUNSYMDLP03.suzlon.com
ePMS.suzlon.com
*.suzlon.com
scmqd.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
suzloncrmmobileapp.suzlon.com
limbs.suzlon.com
first.suzlon.com
influx.suzlon.com
*.suzlon.com
scada247.suzlon.com
webmail.suzlon.com
*.suzlon.com
limbs.suzlon.com
*.suzlon.com
kmportal.suzlon.com
custapp.suzlon.com
*.suzlon.com
seasportal.suzlon.com
suzloncrmmobileapp.suzlon.com
scada247.suzlon.com
irm.suzlon.com
crms.suzlon.com
globaltms.suzlon.com
shipit.suzlon.com
*.suzlon.com
scada-staging.suzlon.com
ncrport.suzlon.com
scadaind247.suzlon.com
selgadm.suzlon.com
first.suzlon.com
ssd.suzlon.com
IM.suzlon.com
*.suzlon.com
*.suzlon.com
access13.suzlon.com
dcm.suzlon.com
*.suzlon.com
*.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
ccrms.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
Suzpoapp.suzlon.com
segrossvn1.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
*.suzlon.com
ePMS.suzlon.com
*.suzlon.com
segpms.suzlon.com
suzen.suzlon.com
webmail.suzlon.com
suzloncrmmobileapp.suzlon.com
dcm.suzlon.com
ncrport.suzlon.com
certportal.suzlon.com
globaltms.suzlon.com
foreignpmt.suzlon.com
webmail.suzlon.com
segpms.suzlon.com
custapp.suzlon.com
limbs.suzlon.com
*.suzlon.com
SCMOMS.suzlon.com
*.suzlon.com
scada.suzlon.com
sams.suzlon.com
*.suzlon.com
segrossvn1.suzlon.com
dcm.suzlon.com
scadaind.suzlon.com
lyncweb13.suzlon.com
access01.suzlon.com
webmail.suzlon.com
scada-cookhouse.suzlon.com
kmportal.suzlon.com
*.suzlon.com
*.suzlon.com
segadm.suzlon.com
seasportal.suzlon.com

Certificate

The complete raw certificate details for kmportal.suzlon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1C8+6XaWy6hv+5AwDzA
SjV2XiUdU4GHImEsujyA18g4LMUbTNVGWvwi/v0ahek2zltX5lnkEoQpYVIaZIXb
riMcyaw1fDz2fcLvt79qd4Ih+wrgtZUPaA52O5a9MGMdL0CPyHyS+C9dRApqj4O4
brYYZ7SYUFgcA1P2Es1JSixczsql3ijOXPE2vBjTYLRTvnWEE0u/MAWeqoI9IYoQ
fI6+gDkupgCvUmHG9wEKuvFIUuR2qAm2dBVGf7nhcUCXemnIQ7fVqKXeJ7keo0Oa
jB03WiqZYY0qmss5cKNwzgL0yF21NXeLhPlDoLVIwkbq0SPYKWC+C60uglfhZ75q
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8437630555198619455779415572897311665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ahmadabad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Navrangpura'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suzlon Energy Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kmportal.suzlon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31725628044088514082199048976788393251681907501948141609752336921431301921989578817053387774665120830263023999198971837515462468115140594149805544211206379123537738846164970492082026416224148302026553874887640111251322431407765462739510871897963459090192989693456900389378641122602780013956440615278321402357762045994801792558132463919762061069605807909889397601977030470443267870199417445884269222968693625688653800034914082684325992373648870758835630458850660355977868663461299173431478280261558031070391942121975285940340127511604069154269866412014767365942496810307008529953030316105401270809915519158201115110001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5775cfcab63caed8f0452a159a7e9e79f1197575
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmportal.suzlon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e7ae61e8d33d63fa94dc9f21bd802ee7973f85156340fcf56acabf5ba8290d11da1d70d7f34c93aa169e700cba42ef27ef70bfe61b544dd55010e05448d5a295b20c5f051eac550ea3bbf356902eea0b992185c92504d775c29f7fb985d28abd8cabbfe4ba5068c570a969acb29732b6d3b0c4e2286421ba833815c155c793856816ef8883d746c51fac5ac1a18f104ad3a84ba5c10a2b3064693e722f86e209d01903ee946e8bf16a6d7d3d8b3a489214364f913b80747b0a6be7f7aed9621bdb65979471795fc499fbef78f11dbeb701ec4fe7b6eaaa34afa739c7587bfefdd00a7b14c63dc176519acc4088bb7f01269b2ea31d6459d85380ad603d03df4