*.bwoffshore.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:02:30:d4:ed:91:fe:36:09:0e:ad:72:a0:36:77:aa was issued on by DigiCert, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bwoffshore.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:02:30:d4:ed:91:fe:36:09:0e:ad:72:a0:36:77:aa
Serial Number (int): 7986742993982435246266203745866381226
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a6:ee:ea:4c:34:3a:e2:46:b8:09:c5:32:60:68:b8:c7:1b:ed:e0:bb
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 15:2c:83:8d:c8:59:af:ad:f5:e6:5c:8d:b0:9b:1a:08:81:ee:f6:ff
Fingerprint (sha256): d2:e0:4b:c1:3b:68:99:f2:a4:3e:5c:28:69:01:70:46:4d:5a:f6:3e:fd:62:3f:ce:b3:1f:7f:13:59:32:46:28

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.bwoffshore.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bwoffshore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bwoffshore.com
bwoffshore.com
bwenergy.no
www.bwenergy.no
www.bworld.bwoffshore.com

Other certificates including the domain name bwoffshore.com

(limited to 100 certificates)
integration.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com

Certificate

The complete raw certificate details for *.bwoffshore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0OS7sF1bYDD/5Krcgm8
AuTwYBDuIkBhSVDVD6V8QpCyJpx/lqJRJfYeWNOzGp3jFbMzqk+wLSpOKlBfFXND
1Gc3ppY6Z8djFvT3WwX2NLMawtS0fHRQ7gE5h9DOzNS2okGQbOG1FyydlLHizYq2
nr/f9AzVdYx06F17Aq8xiTsd8ScyFYp/3mOJ0MkPWT0CImoc4KTxzYkTziAqDUHM
gxEwRPSEFudHVwShmgkLxnHK6BXFIDZRZrCorlxxXcK8uhwNnZ13lJQ6/NYioYil
XooOX1AALnM/2TenZA54IzkCGLBNOOJ1MLwqVte3QsJa+Io6cWJd6UmTpTbGiZHN
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7986742993982435246266203745866381226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bwoffshore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25659697867553955954137420161612653191187196088155745038933473719268135583412228847795228636377489988369997887244123825700832425438362842663932660779733895762226396044294863930645249069870869122707936115786133365342082457752049149687690605315939055384342449470059050307663002541703523106406597606096764889778114319384337395852290559329050540427876243441991924944505473503340829100294077982933250819099887436724019282534223308776438030710494485335519370624411465892646440905436422485509378812848578472779742290152478752506584969233008814458788223053196061996376945134750700427300508181318924006023418735188946281680133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6eeea4c343ae246b809c5326068b8c71bede0bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwenergy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bwenergy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bworld.bwoffshore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184ccebbb75000004030046304402200adaf1833dcf3e495c1f872b43a36a783214ba93392beecb4de13f78554fdba60220259de45b7a6d3643bc694ca77a3cd1370f32579c2ccf9db1150395726e104cbe007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000184ccebbb950000040300483046022100959b73bcd513474a43b3549e7836429e1b1ea80181847cd21bd220b454d16e80022100db1e2d1f27ebc818448f0122f22b187d6bef94ecb68b7155e967b1e1bfaa0890007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184ccebbb670000040300473045022100821899b104d69911e7adcdbf89f9bdd327df86a783c8e6768a5dd90b8d360faf02205a76665a556a146a20c4ca5fdf958c4710f04c27b0e08ef73d927c1121cfbf45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009dd06fb6a3e459d9fdf63a39cac4adaaa478a69d020451d5bae3d4a9afa1fb0203b0044b1ee1cb954ef02d628ff3c2f7df53c2f2c2b1be63cef4d814655524fa262d20f27fc06b841d87b2a5653e99e485e3c592723d0aa891e71da161909a835886ad40856f979ca8645dc6a49e578f1cdd26e92f7da6380e59a666ea89ef32adfd13486536e9030e435483a906c7dd7aadff58787935f11be9c26938affa87d2b04d7eecc23d1d9a0cd926c21bad9cd6a7e53ea1d320912f357d1bb30b17bc56b6dc49cce57fe34369b29532198bad62d9898e41e06a7131780e1757da66f8b23b27dffdba72beb3907283a387cef6e12dad94f96ea4ce17a7924c57203ea5cb7a0ee64ab8274c88af107fc67a81a7f36e5bb7d9581b36bc9987ffb89ba92b97cf16070fff481e4321ac5a92678f338a185650ad1e6184b380a691aa1ad54feef6a4c7949e379ab8cde125370d7f1d6877f98226aa98ff3c220eb371192610693dce3a50682f8a423b813ea1ccd758dc07f92a9ee00d6e406bf1f6ad49b0ff7240cd5f60b9af0a43e1c134ce2269dd8ab8d79ed9bb8367124e0aee4f6dc203711f0aa4818260295ae19321aa0cc5d2f610e37dbee883207920d9c78f33dd054a62ad31203a8e99c6333393fa51eb1abefd009adab45b658462138d2363ae456658d1306216e6ff80c39ae081a5ead82f3941b255d3fb86cffe233dad312a34