HSAzP-CyArk-ILB.hsoa.homeservices.com

- Berkshire Hathaway Energy Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:05:cf:0b:48:6b:d4:53:e7:c2:5b:b3:74:bf:4c:a1 was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Berkshire Hathaway Energy Company

Organization: Berkshire Hathaway Energy Company
State / Province: Iowa
Locality: Des Moines
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 50:05:cf:0b:48:6b:d4:53:e7:c2:5b:b3:74:bf:4c:a1
Serial Number (int): 106368400499796965982442435861188398241
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fb:b8:12:15:2b:98:65:48:94:cf:0c:01:02:fd:b0:84:a0:9d:ea:0f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f3:66:49:5a:ce:a4:aa:97:be:f4:a9:9e:4b:a4:3b:56:45:1c:3e:57
Fingerprint (sha256): a1:02:43:25:3f:a1:41:d5:f0:93:5a:66:78:2a:65:00:b1:38:3b:f0:bd:9c:56:af:ab:cf:08:68:0f:f6:06:a1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate HSAzP-CyArk-ILB.hsoa.homeservices.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for HSAzP-CyArk-ILB.hsoa.homeservices.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

HSAzP-CyArk-ILB.hsoa.homeservices.com
www.HSAzP-CyArk-ILB.hsoa.homeservices.com
HSAzP-CyArkCS04.hsoa.homeservices.com
HSAzP-CyArkCS05.hsoa.homeservices.com

Other certificates including the domain name homeservices.com

(limited to 100 certificates)
hsoa-prod-services.txm.vodii.co
txmservices.homeservices.com
txmservices.homeservices.com
webmail.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
access.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
blog.homeservices.com
blog.homeservices.com
blog.homeservices.com
hsoa-prod-services.txm.vodii.co
softprouat.hsoa.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
softpro.hsoa.com
wwwqa.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
*.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
webmail.homeservices.com
sip.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
*.homeservices.com
*.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
webmail.homeservices.com
txmservices.homeservices.com
gp.homeservices.com
blog.homeservices.com
blog.homeservices.com
*.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
idctools.homeservices.com
smtpdsm.homeservices.com
ews.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
*.homeservices.com
HSAzP-CyArk-ILB.hsoa.homeservices.com
txmservices.homeservices.com
blog.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
connect.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
SoftproUAT.hsoa.com
txmservices.homeservices.com
wwwqa.homeservices.com
HSAzP-CyArk-ILB.hsoa.homeservices.com
txmservices.homeservices.com
hsoa-prod-services.txm.vodii.co
txmservices.homeservices.com
webmail.homeservices.com
www.homeservices.com
hsoa-prod-services.txm.vodii.co
mftdev.homeservices.com
txmservices.homeservices.com
wwwqa.homeservices.com
autodiscover.homeservices.com
hsoa-prod-services.txm.vodii.co
HSAzP-CyArk-ILB.hsoa.homeservices.com
txmservices.homeservices.com
softpro.hsoa.com
txmservices.homeservices.com
webmail.homeservices.com
txmservices.homeservices.com
softpro.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
hsoa-prod-services.txm.vodii.co
txmservices.homeservices.com
txmservices.homeservices.com
softpro.homeservices.com
blog.homeservices.com
txmservices.homeservices.com
blog.homeservices.com
txmservices.homeservices.com
softpro.homeservices.com
txmservices.homeservices.com
txmservices.homeservices.com
mftdev.homeservices.com
txmservices.homeservices.com
*.homeservices.com

Certificate

The complete raw certificate details for HSAzP-CyArk-ILB.hsoa.homeservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106368400499796965982442435861188398241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 19:04:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 19:04:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Des Moines'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berkshire Hathaway Energy Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSAzP-CyArk-ILB.hsoa.homeservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675821403431228351019512190026834387386179392387040164165532577332177273077937393956089873394503042186704896639436924183237338002173190949016449201239343871822859759810406354170709137326028358206626877006595968373813538769258977045330873870194948081459061886280723889594715763127607674316106528764211138546185043910713580878300651439764769564365539461876520834950013666941020009469993347406857149785496186894425395157062618476990969200052688386915715774814875928661383611708437242157416993900569232045395804490595866768125284320042181866330477140310155226649783701317908666187190249008296431703691495872829465250158472318301062367694977188246189448687238413026867623237059133299992830203382147531656232648367027839057914590775451482971115928520957863445217961816355979777718091753358642010113673102453028798600260942115260943718556018480219396255138623709563502037809349189175554953758974665167011652593001250698267605990351888010886294639788752103127609989555460266237026826230873170573405654685710819636685858495689317128072764113381255803186907356661640526331137785275410399215060043773902707986464711239910895610140929973829179397618282199463576958970048283784714554269057532448485438978848846304456202811843718107056064463863541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbb812152b98654894cf0c0102fdb084a09dea0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HSAzP-CyArk-ILB.hsoa.homeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.HSAzP-CyArk-ILB.hsoa.homeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HSAzP-CyArkCS04.hsoa.homeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'HSAzP-CyArkCS05.hsoa.homeservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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