| # | Label / Alias | Subject | Issuer | Serial | Key | Signature Algorithm | CA | Key Usage | Extended Key Usage | Subject Alternative Name | Basic Constraints |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | sectigo_1 | CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB | CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB | 1 |
2048-bit RSA | sha1WithRSA | CA | KeyCertSign CrlSign |
none | none | present CA: True |
| 2 | sectigo_2 | CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US | CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB | 3972443af922b751d7d36c10dd313595 |
4096-bit RSA | sha384WithRSA | CA | DigitalSignature KeyCertSign CrlSign |
none | none | present CA: True |
| 3 | sectigo_3 | CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB | CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US | 137d539caa7c31a9a433701968847a8d |
2048-bit RSA | sha384WithRSA | CA | DigitalSignature KeyCertSign CrlSign |
serverAuth clientAuth |
none | present CA: True PathLength: 0 |
| 4 | sg_unipass_root_ca_2016 | CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE | CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE | 1 |
4096-bit RSA | sha256WithRSA | CA | KeyCertSign CrlSign |
none | none | present CA: True |
| 5 | sg_unipass_server_authentication_2016_ca | CN=SG UniPass Server Authentication 2016 CA,O=GROUPE SOCIETE GENERALE | CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE | 7 |
4096-bit RSA | sha256WithRSA | CA | KeyCertSign CrlSign |
none | none | present CA: True PathLength: 0 |
| 6 | ibmwebspheremqsqmjokersim | CN=sqmjokersim.pbgate.net,O=Credit Agricole SA,ST=Île-de-France,C=FR | CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB | d73f3ea526d44c569d7ebf2e3cd94984 |
2048-bit RSA | sha256WithRSA | Leaf | DigitalSignature KeyEncipherment |
serverAuth clientAuth |
DNS sqmjokersim.pbgate.net | present CA: False |
| Priority | Category | Alias | Serial | Issue | Action | Command |
|---|---|---|---|---|---|---|
| P1 CRITICAL | EXPIRY | ibmwebspheremqsqmjokersim | d73f3ea526d44c569d7ebf2e3cd94984 | ❌ Error: Certificate 6 Alias ibmwebspheremqsqmjokersim Serial d73f3ea526d44c569d7ebf2e3cd94984 expired 969 days, 18 hours, 0 minutes ago. | Renew the certificate immediately. | keytool -genkeypair -keystore "C:\Tools\certificate\jks\SQMJOKERSIM.jks" -alias "ibmwebspheremqsqmjokersim_new" -keyalg RSA -keysize 4096 -sigalg SHA256withRSA -dname "CN=sqmjokersim.pbgate.net, O=Credit Agricole SA, ST=Île-de-France, C=FR" -validity 365
keytool -certreq -keystore "C:\Tools\certificate\jks\SQMJOKERSIM.jks" -alias "ibmwebspheremqsqmjokersim_new" -file "sqmjokersim.pbgate.net.csr" |
| P2 WARNING | ALGORITHM | sectigo_1 | 1 | SHA1withRSA — deprecated, will be disabled | Plan migration to SHA256withRSA at next renewal. | keytool -delete -keystore "C:\Tools\certificate\jks\SQMJOKERSIM.jks" -alias "sectigo_1"
keytool -importcert -keystore "C:\Tools\certificate\jks\SQMJOKERSIM.jks" -alias "sectigo_1" -file " |
| Certificate | Chain |
|---|---|
| ibmwebspheremqsqmjokersim | sectigo_3 ----> sectigo_2 ----> sectigo_1 |
| sectigo_1 | (root) |
| sectigo_2 | sectigo_1 |
| sectigo_3 | sectigo_2 ----> sectigo_1 |
| sg_unipass_root_ca_2016 | (root) |
| sg_unipass_server_authentication_2016_ca | sg_unipass_root_ca_2016 |
| Serial | Chain |
|---|---|
| 1 (sectigo_1) | (root) |
| 1 (sg_unipass_root_ca_2016) | (root) |
| 137d539caa7c31a9a433701968847a8d | 3972443af922b751d7d36c10dd313595 ----> 1 (sectigo_1) |
| 3972443af922b751d7d36c10dd313595 | 1 (sectigo_1) |
| 7 (sg_unipass_server_authentication_2016_ca) | 1 (sg_unipass_root_ca_2016) |
| d73f3ea526d44c569d7ebf2e3cd94984 | 137d539caa7c31a9a433701968847a8d ----> 3972443af922b751d7d36c10dd313595 ----> 1 (sectigo_1) |