OV SSL/TLS Certificate for mercurytimesheetapp-dg1.ey.net Issued to Ernst & Young Nederland LLP

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the mercurytimesheetapp-dg1.ey.net OV SSL/TLS Certificate

This certificate with serial number 41:f0:24:d1:0c:e3:02:a4:3a:c5:bb:35:8b:01:95:3b for mercurytimesheetapp-dg1.ey.net was issued on by SSL Corporation.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for mercurytimesheetapp-dg1.ey.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 41:f0:24:d1:0c:e3:02:a4:3a:c5:bb:35:8b:01:95:3b
Serial Number (int): 87646717701487846064119249527231321403
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: e5:aa:62:0f:c4:91:27:93:5c:e2:3d:03:9f:38:f9:db:4b:4b:22:68
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): be:4c:e3:f6:56:6f:05:28:75:ad:73:ea:18:96:e6:5f:dc:67:54:be
Fingerprint (SHA-256): e2:e4:07:95:bd:cb:a6:a0:d4:0c:89:17:28:22:26:62:14:6c:dd:d3:9d:6c:80:bd:c7:7d:e0:26:80:93:1d:45

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate mercurytimesheetapp-dg1.ey.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mercurytimesheetapp-dg1.ey.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

mercurytimesheetapp-dg1.ey.net

X.509 Certificate

The complete raw X.509 certificate details for mercurytimesheetapp-dg1.ey.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt9XLuEEVoPaO9nUYk/f
wOdoM1V6pxeMAW/Gz/UhoTQ+hruoXeUP5EZ1z2BTlpyfPX9zrMHQrjU7YWiLAGhH
cBTzPlIaTEhGA0osddFYmm5lFlhyTakjj7aZ1a8ITiInIDFhUL7GKJlO71FPLQhx
5jnBF+rWbn5MDmlnaxZEQFECpey98LDglKrWfJoDWU7aH1zakpjw/0f+ijMt6d2B
uQoqQdFuw8HfpMavoV79sfvsu7VpG54QqbFfP0MLfgknaSYh23HPK0h3UNZK8S/q
FTPTivYH15RdJh5nP0yeQ15IitLAN9RWzZAy66xIEm22X0/ch9LSL1GvEVqCeFSo
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87646717701487846064119249527231321403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 03:50:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-03 04:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mercurytimesheetapp-dg1.ey.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25610270937545045476771398276411327137696559746734278487557602545735357268432076394865508494411095637290875445802648044824161789550440775416928616592970604230392821311806645356401227560468858667753165803055352079397610669500652522859002909859423544319283776344762753213871795120007989927060294428059278520621635007042730033381716484662609441567930902177438133252250187201486283052420770388857714629491653285153486709586255067006702819113379626811883271388766436229307269865920523820531051085073882615082474368348664100592307165455336944742044592675646397429165116619029545557245047202709120251786670708522183355050117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurytimesheetapp-dg1.ey.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5aa620fc49127935ce23d039f38f9db4b4b2268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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