webmail.suzlon.com

- SUZLON ENERGY LIMITED -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1c:d4:2e:47:fc:d4:ad:e8:79:68:79:10 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SUZLON ENERGY LIMITED

Organization: SUZLON ENERGY LIMITED
State / Province: Maharashtra
Locality: Pune
Country: IN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 1c:d4:2e:47:fc:d4:ad:e8:79:68:79:10
Serial Number (int): 8922091105551382152990980368
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 5e:fe:c3:6a:7e:f2:d7:5c:a0:2b:6f:5b:be:e6:f6:26:2c:2e:32:d6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): bd:ef:2f:4f:be:a7:45:9a:27:79:75:c5:54:cd:bb:9b:17:67:51:80
Fingerprint (sha256): 91:cc:db:fe:96:93:f8:ad:db:7a:d9:93:e0:38:ed:9b:38:7b:1f:eb:47:51:10:7b:56:2c:8f:69:91:57:db:e0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate webmail.suzlon.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.suzlon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.suzlon.com
autodiscover.suzlon.com
www.webmail.suzlon.com

Other certificates including the domain name suzlon.com

(limited to 100 certificates)
scada.suzlon.com
webcontent.suzlon.com
ssd.suzlon.com
scada.suzlon.com
dcm.suzlon.com
scada.suzlon.com
scadaind.suzlon.com
mdm.suzlon.com
corpftp.suzlon.com
lyncweb13.suzlon.com
scmqd.suzlon.com
hseportal.suzlon.com
seasportal.suzlon.com
crms.suzlon.com
webmail.suzlon.com
*.suzlon.com
*.suzlon.com
ncrport.suzlon.com
ssd.suzlon.com
*.suzlon.com
SELPUNSYMDLP03.suzlon.com
ePMS.suzlon.com
*.suzlon.com
scmqd.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
limbs.suzlon.com
first.suzlon.com
influx.suzlon.com
*.suzlon.com
scada247.suzlon.com
webmail.suzlon.com
*.suzlon.com
limbs.suzlon.com
*.suzlon.com
kmportal.suzlon.com
custapp.suzlon.com
*.suzlon.com
seasportal.suzlon.com
scada247.suzlon.com
irm.suzlon.com
crms.suzlon.com
globaltms.suzlon.com
shipit.suzlon.com
*.suzlon.com
scada-staging.suzlon.com
ncrport.suzlon.com
scadaind247.suzlon.com
selgadm.suzlon.com
first.suzlon.com
ssd.suzlon.com
IM.suzlon.com
*.suzlon.com
*.suzlon.com
access13.suzlon.com
dcm.suzlon.com
*.suzlon.com
*.suzlon.com
ccrms.suzlon.com
Suzpoapp.suzlon.com
segrossvn1.suzlon.com
SuzlonCRMmobileAPI.suzlon.com
*.suzlon.com
ePMS.suzlon.com
*.suzlon.com
segpms.suzlon.com
webmail.suzlon.com
suzloncrmmobileapp.suzlon.com
dcm.suzlon.com
ncrport.suzlon.com
certportal.suzlon.com
globaltms.suzlon.com
foreignpmt.suzlon.com
webmail.suzlon.com
segpms.suzlon.com
custapp.suzlon.com
limbs.suzlon.com
*.suzlon.com
*.suzlon.com
scada.suzlon.com
sams.suzlon.com
*.suzlon.com
segrossvn1.suzlon.com
dcm.suzlon.com
scadaind.suzlon.com
lyncweb13.suzlon.com
access01.suzlon.com
webmail.suzlon.com
scada-cookhouse.suzlon.com
kmportal.suzlon.com
*.suzlon.com
*.suzlon.com
segadm.suzlon.com
seasportal.suzlon.com
globaltms.suzlon.com
tqs.suzlon.com
*.suzlon.com
suzloncrmmobileapp.suzlon.com
scmqd.suzlon.com
segpms.suzlon.com
*.suzlon.com

Certificate

The complete raw certificate details for webmail.suzlon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IyV1de1Y9QwEPGcsNK2
v1QFzVi8HPpNM8XMFw/tTNa6VPuQqD1hXGEU0n/oGKD4ub512RLgmTAM3ULlAvF8
bV6oydi85V2S2370w2rMQgSSvxV45nRajZ/c0UtYqNIHvFX2zqc8VWTUR1eHXvCU
Ntzt5BTuXmLWwM2H7lFaQ6ARDKe7wkG5D58Hd4Nnl/eVVzhY2daPmGfdp8nA/YQV
urdgkf/eYUqtgC9P5y6zyWoSDp2cEuFMrI9E9SoFNudSbedV1PH1JYuMwRTYRUhg
Qu/ncwXfoF7juS2oelTdwMUficYUi0rWJtIIPjqDnjceczVUJywukKQiau0+4Hjz
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8922091105551382152990980368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 05:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 07:06:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pune'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SUZLON ENERGY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.suzlon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28346705504766903721241407845038329828030489403761366748605243916019631439410231175333984606092013915676052404906333599578603019981662411147016780973812479330952866306202573960332576761058865456474151049702877964790695495753568106672352959363929091605068552005426034552477065531551543594092283089828551366580612863184160825372541081388611036667226125304282306160971920384099119352859221433968470479254658595951806370535075753408647417300791603006845398448108010520837945299764297890176998376964720677654388796950335871192063356706908927639845920183782148373789633416505239429374567069544586364168025197564249817805733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.suzlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.suzlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.suzlon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5efec36a7ef2d75ca02b6f5bbee6f6262c2e32d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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