api.deep.cartier.cn

- Richemont International SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:bc:6e:1a:2d:4d:be:5c:a2:01:12:51:28:e9:9d:54 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:bc:6e:1a:2d:4d:be:5c:a2:01:12:51:28:e9:9d:54
Serial Number (int): 18258348893617892685009323125167988052
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:fd:28:9b:27:76:04:25:e5:3a:a4:de:fc:b9:0c:d9:55:2d:e7:06
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 58:f3:45:69:62:bf:41:1f:9c:93:b7:74:a1:32:8b:86:e3:05:cf:05
Fingerprint (sha256): e2:2d:f4:73:6f:04:9d:cc:37:74:81:b8:40:4a:11:60:f3:0e:73:a9:12:90:70:e9:2f:f0:e0:ca:8e:18:69:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate api.deep.cartier.cn

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.deep.cartier.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.deep.cartier.cn
api.portal.cartier.cn
keycloak.deep.cartier.cn

Other certificates including the domain name cartier.cn

(limited to 100 certificates)
linemedia.preprod.richemont.com
www.cartier.com
www.cartier.com
secure.weboutique.cartier.cn
linemedia.preprod.richemont.com
val-api.deep.cartier.cn
secure-www.bridal.cartier.com
static.deep.cartier.cn
secure.www.preprod.cartier.cn
secure.weboutique.cartier.cn
secure.www.pprod.cartier.com
www.quality.alange-soehne.com
presse.fondation.cartier.com
weixin.cartier.cn
www.cartier.com
akamai-san143.exacttarget.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
weboutique.cartier.cn
weixin.cartier.cn
cartier.com
secure.www.cartier.com
akamai-san143.exacttarget.com
secure.www.cartier.cn
www.quality.alange-soehne.com
www.cartier.com
secure.www.cartier.com
secure.www.cartier.cn
www.quality.alange-soehne.com
weixin.cartier.cn
secure.m.cartier.com
akamai-san143.exacttarget.com
www.cartier.com
www.cartier.com
secure-www.bridal.cartier.com
www.cartier.com
www.cartier.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
cartier.com
qua-static.deep.cartier.cn
cartier.com
www.cartier.cn
cartier.com
weixin.cartier.cn
www.cartier.com
secure.www.cartier.com
linemedia.preprod.richemont.com
weboutique.quality.cartier.cn
val-static.deep.cartier.cn
secure.www.cartier.com
linemedia.preprod.richemont.com
www.cartier.com
cartier.com
secure.www.cartier.com
linemedia.preprod.richemont.com
www.cartier.com
www.cartier.com
chat.preprod.cartier.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
cartier.com
weixin.quality.cartier.cn
secure.weboutique.cartier.cn
www.cartier.com
secure.m.quality.cartier.com
weixin.cartier.cn
linemedia.preprod.richemont.com
secure.m.quality.cartier.com
linemedia.preprod.richemont.com
weixin.cartier.cn
secure-preview.cartier.com
www.cartier.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.cartier.com
weixin.cartier.cn
linemedia.preprod.richemont.com
weixin.cartier.cn
chat.preprod.cartier.cn
presse.fondation.cartier.com
linemedia.preprod.richemont.com
secure.m.cartier.com
weixin.cartier.cn
www.quality.alange-soehne.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
cartier.com
weixin.cartier.cn
weixin.cartier.cn
secure.m.preprod.cartier.com
secure.www.cartier.cn
weixin.quality.cartier.cn
secure.www.cartier.com
presse.fondation.cartier.com
cartier.com

Certificate

The complete raw certificate details for api.deep.cartier.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yeMLP9K54AsEo3nO9Qv
dyqH8sU7fmfzNGefdG+Aj6sqdq8wEi0QaioNQBvLrRRVfupJDP6rhNIkSYEg5iE3
SS03PMxcVmHVGnmv4TVHzHSSGxKRcheLkFbNSfJItebPSt9JfASmNr6xOpPALIJY
w8GJLmEknHYbIpCAVkDoI4pkbm0DQ5y2dfz+/LNPOMnbUswIfehu3SaOiUIPVxv+
jgguY4r/ogqYROElNwvQafZZ7NX63bb21tfHm7Bccyza4d8exmeL+W5nhATkPjUQ
hFsjStLWIRhG/nC6W463jFLv1cwoL7XMehMFPx2ehMvHSyzryHA1ismfMUE67MbU
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18258348893617892685009323125167988052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.deep.cartier.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28170643636893365059425339161228184323839320418882540009579438881077965631587219329050885953308313773605050481206614383280174379490905382758595703075467479169943407547669768654381343656789901543375118811590180280517617760943022796867994057632054151864682349869320928412102348519770760612116287686344511624608424911953834940648233399802204258565733988671976588033783498297707639020299336629181116878075470008202863712389398313258527772596173965998049558175832748240096410717440179091831987847741717681829791094861223358291693248463465246767151911333660873137606487621175005866407949251107212853013505383289792456217767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04fd289b27760425e53aa4defcb90cd9552de706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.deep.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portal.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keycloak.deep.cartier.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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