barossa.coconsole.bwoffshore.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:91:8d:d8:49:59:a7:ca:ea:92:a9:40:c8:fc:13:00 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barossa.coconsole.bwoffshore.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:91:8d:d8:49:59:a7:ca:ea:92:a9:40:c8:fc:13:00
Serial Number (int): 2084987996010476338919018376669696768
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f6:8e:14:df:ec:64:1c:d3:c4:35:87:e5:9f:41:c4:ed:91:2a:2b:51
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): c1:b4:e0:9f:c5:28:a8:55:38:29:b7:c4:cc:84:f3:00:4c:d2:80:79
Fingerprint (sha256): a5:77:c5:cd:91:31:88:e0:6f:cb:63:8f:f6:57:db:6a:2f:0c:96:41:27:42:83:65:03:bb:f0:05:1c:81:c9:08

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate barossa.coconsole.bwoffshore.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barossa.coconsole.bwoffshore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barossa.coconsole.bwoffshore.com

Other certificates including the domain name bwoffshore.com

(limited to 100 certificates)
integration.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com

Certificate

The complete raw certificate details for barossa.coconsole.bwoffshore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vtHynRfsC+SDWbSX8R9
UPPDLulKZXwMYsAFx6Q5Rlvf4efbixAk2z76YVhs/xSCx4TOl+qRmZWmWr/eBnNc
DQFLqIBajW2kvU+JY2MLAAu00W7GeEMX1VsUq0WywwLCa/oDReBAgSkEhO//kWyB
sZ5XASlG6x1Vxo54IJV9++VECZUHbH1KUEyplq4DdgFi6dqwdX54btWn/lLQxv9X
XruhmTK9psR+n2bSAhBK7bFmbhhkdFvLKBVrUtqWev/5OF404hVowgrUd6DCJWbi
tCB12gJtrcfDMuOXfhhYNDzOabT5cNr7gLEy2ACnOV9YGDCB2Mhs2xlP3FkcUlvs
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2084987996010476338919018376669696768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barossa.coconsole.bwoffshore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28148814702184686173043022436500701483814581811604261105607799107478060338235705142005757084380852173879486192485639023798711183215176508741661052786172321256720251507449527551103112317091002045982797640379976748018706858162506650091446940345911581738128103319260247977469800780072696905641404419419623746454111759684469740526717208961181122497185440210403752598851798894863292003333770548157294761838746768002236287604353540111125742384929233177832789910035285475804187019821686309844836060656607223297381880752089064272646670478631398199658561382720200475635687440667898295986676473069044646379950254571590008957969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f68e14dfec641cd3c43587e59f41c4ed912a2b51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barossa.coconsole.bwoffshore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3b0f0eb20000040300473045022037fb9d7d3cc35e7bd4475efe8890d3d6ad76a0d4c418db45011431c73e3f96cc022100a9e9b78f1d08db839e089f4cacfc29899b5ea6c5f0150141a6863e28148d513000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3b0f0ec40000040300483046022100f09ada4e19ebc7e0db6736d28ae527832ae21d6855d1845cc92669c0f8b68297022100b7de2908c85643a097c6f963d09ebc1125d3dfa941bb0346b39f18bf07ccc488007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c3b0f0ecd000004030047304502207c2594746166fe2dd49aed7867641a5915800fb2a42f30b07e1607a07be539de022100a19fe1f6249bd738c78d9eacc4dd93368cd4bc44fdd2aae3c86b31b38ae724b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00123e74822c630fe0a35c6d0c9173552bbbec0e958f7a84b3512a98422cab621f71cb2849b20202bda03b729ecc7d6e118fc44fd01ecc63e9fcd96d86edd253746096a4cbb1a0e72f9a8c85cd2db2d39dfadd14d2b28eb8d244e086b710de98d4eeccb6499fb5bacc8789f6fd1580d089b4bb7580af84972a35a0865ec28b49543ae45acd5c3869836976be2a309d9fadfcf98e82a55b6d35bea9458cb661f6e5a5770733bdc935547c7b8e54725ac6eaf24565726b4dac72fad4c817736b8179e976e0740b9a81c619b418495ebd8a0482ce57a848433b61d9dc9900049338daee532b12085de92144eeae7e3bda7cbd9e7d3cd194be760ce73d2b4c542868b8f9d99b1149edacd9411b10d87ade7e239550b3d961850d6bd39c24731a4acd334c01e80c68c77ddd7d7194afc738443894700843b2b6615db8d6d21bd163bb3ab4a37f38a6e46fb5fca6b1e61baff080d6f4021cf377b867fcfc057e9e680fe2d118ca22026a231ea80bd6105b3cb70915640b1af406f96f354105920ef47f07ae42b021a1dbbff02d49a140ce783ebc44ff67ecbd1405889397ec2e309a44d90ad8931cb28e1d879423daf6dd934e816fbcb03733dc38dea8d01486ad319cedc00d18aa07ab08820dfc55a3596b31901b040337f4f0623a16d0c561c9000cfb8974d9270a47aa1e46e8b0a773185c2a960b5a7825475a86073727404d5de813