*.sany.in

- Sany Heavy Industry India Pvt. Ltd -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:01:ee:5a:8c:1f:59:f6:c2:a1:f9:91:3e:e4:77:e1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sany Heavy Industry India Pvt. Ltd

Organization: Sany Heavy Industry India Pvt. Ltd
Organization unit: Construction
State / Province: Maharashtra
Locality: Pune
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:ee:5a:8c:1f:59:f6:c2:a1:f9:91:3e:e4:77:e1
Serial Number (int): 5326938667384296618532187375900325857
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6c:9c:ab:da:0e:7b:a9:d3:96:37:bd:b1:08:4d:fb:7a:4d:c5:93:3f
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c8:e0:1d:d0:c8:a7:ee:5b:96:6b:c1:68:ea:59:c0:d8:ad:d7:23:de
Fingerprint (sha256): b1:5b:fb:48:bb:9d:a5:8a:a4:af:a8:83:c5:6f:37:b4:d2:f6:a1:43:22:cd:f1:aa:a1:d4:e3:b8:ed:54:f8:3f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.sany.in

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sany.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sany.in
sany.in

Other certificates including the domain name sany.in

(limited to 100 certificates)
support.alpha-serv.co.in
webmail.sany.in
servicedesk.cruxdigital.in
askme.poruslabs.com
webmail.sany.in
askme.poruslabs.com
helpdesk.itsmtest.co.in
askme.poruslabs.com
askme.poruslabs.com
askme.poruslabs.com
askme.poruslabs.com
*.sany.in
*.sany.in
servicedesk.cruxdigital.in
support.momentumworks.co.in
askme.poruslabs.com
helpdesk.itsmtest.co.in
*.sany.in
askme.poruslabs.com
helpdesk.itsmtest.co.in
webmail.sany.in
helpdesk.jkfenner.com
helpdesk.ilensys.com
support.momentumworks.co.in
askme.poruslabs.com
askme.poruslabs.com
helpdesk.ilensys.com
askme.poruslabs.com
askme.poruslabs.com
support.valuepointsystems.com
it-selfservice.sany.in
webmail.sany.in
it-selfservice.sany.in
support.valuepointsystems.com
helpdesk.ilensys.com
helpdesk.ilensys.com
webmail.sany.in
support.momentumworks.co.in
support.alpha-serv.co.in
support.valuepointsystems.com
it-selfservice.sany.in
*.sany.in
it-selfservice.sany.in
*.sany.in
askme.poruslabs.com
webmail.sany.in
servicedesk.cruxdigital.in
askme.poruslabs.com
support.alpha-serv.co.in
appsupportit.arvind.com
support.momentumworks.co.in
support.valuepointsystems.com
servicedesk.cruxdigital.in
servicedesk.cruxdigital.in
helpdesk.itsmtest.co.in
support.alpha-serv.co.in
helpdesk.dalberg.com
servicedesk.cruxdigital.in
servicedesk.cruxdigital.in
askme.poruslabs.com

Certificate

The complete raw certificate details for *.sany.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxI/YJh/IOn2l8gtrA6X
FBqwp7Y+i34bwzTG9ri1X2pz0epZbE14WVk2d457D8iJ2fHFGwezDCax+iuhNHPs
UzOemp0p4QekE9XH/SpIjzmcpHsdmGxXtse3DoXCOdZA6fcbz1CUxCFbHQao7hcw
ANIf/78EYda88HMttTE6AXK6xfNRXwNE6o9QMdrWRxZBm2ZyXFdZ1dvgLU0iURO4
j11XCrnI72kbk0ahz02vfr6QzPwMMqNYU5NwTjKJbKvjBYjQiDvWpX4kaKWKkwfa
Kb+3DDJPZtWMgaEmzlOJOda9Oc7Z10DkjG1qpmd+F/hzsb3ZUDuBtiQUdOmaasPd
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5326938667384296618532187375900325857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pune'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sany Heavy Industry India Pvt. Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Construction'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sany.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21595748360188554076301279902092335693132305699666509158768083062977522181807714710925965653939915824638500308589225478756945312222793902236667676805938187534836943930988038945110102292844368149211043642574486063463215386534059988291803928673489120372509529993518238391761277552668617914855943902298566689357683137214537224669117944062436540212030209327980593725104605692807619895455805471267002434063048706343270151540095665959303095413416005028640779016707033344656701131881292389679501050835164262260285246019428742865627574864620874138618301686401524911818260733935377279711618434860129413393295753356509968588193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c9cabda0e7ba9d39637bdb1084dfb7a4dc5933f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sany.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sany.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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