mx2-was.mta.salesforce.com

- Salesforce.com Inc -

Issued by Cybertrust Public SureServer SV CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:41:5c:21:d3:ae:9c:53:03 was issued on by Cybertrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Salesforce.com Inc

Organization: Salesforce.com Inc
Organization unit: Applications
State / Province: California
Locality: San Francisco
Country: US

Cybertrust Inc

Organization: Cybertrust Inc

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:41:5c:21:d3:ae:9c:53:03
Serial Number (int): 20282409603674826844524334830339
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: fc:1a:1d:33:8c:cf:89:fc:ef:4e:0c:1d:bf:db:99:84:88:b2:d2:ca
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9

Fingerprint (sha1): 90:10:c4:fd:43:19:ad:60:67:27:16:ea:22:0b:2c:8a:be:a7:c7:0b
Fingerprint (sha256): 00:15:f8:04:71:dc:13:19:b2:25:85:0f:9e:8a:6a:7d:71:90:bd:38:c3:e5:f4:73:2d:de:88:65:86:15:41:84


Revocation information

CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crl

Check the revocation status for certificate mx2-was.mta.salesforce.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx2-was.mta.salesforce.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mx2-was.mta.salesforce.com

Other certificates including the domain name salesforce.com

(limited to 100 certificates)
*.cs109.force.com
*.cs26.my.salesforce.com
*.cs16.my.salesforce.com
*.cs54.force.com
mx2-was.mta.salesforce.com
*.cs73.force.com
na156.salesforce.com
*.umps1c4.salesforce.com
*.cs55.force.com
*.na151.force.com
*.c360a.salesforce.com
mx2-chi3.mta.salesforce.com
*.na202.force.com
config.cccnp0010.cnp-dev.commercecloud.salesforce.com
*.cs54.force.com
orgchart-dev.it.salesforce.com
*.na85.force.com
na149.salesforce.com
slotmatching22.salesforce.com
cs290.salesforce.com
emea.salesforce.com
*.eu27.force.com
sfm-ucm1.internal.salesforce.com
devforce.map.fastly.net
slotmatching19.salesforce.com
eef-eu.mce.salesforce.com
*.cs30.force.com
vpn-emea.corp.salesforce.com
ap19.salesforce.com
*.na127.force.com
*.sandbox.us01.dx.commercecloud.salesforce.com
na8-api.salesforce.com
*.cs81.force.com
mx2-phx-sp4.mta.salesforce.com
cs30.salesforce.com
sfm-cup2.internal.salesforce.com
vision-us.mce.salesforce.com
mx4-hio-sp1.mta.salesforce.com
dns-vetting1l.map.fastly.net
www.assistly.com
*.cs1.my.salesforce.com
*.na64.force.com
mx3-dfw-sp4.mta.salesforce.com
*.cs34.force.com
cs122.salesforce.com
*.na72.force.com
na166.salesforce.com
salesforce.com
*.cs68.my.salesforce.com
oid.internal.salesforce.com
spell-sjl.salesforce.com
lo2.my.lightning-container.com
dns-vetting1a.map.fastly.net
*.na36.force.com
ext-am-sbx.am.commercecloud.salesforce.com
slotmatching7.salesforce.com
na140.salesforce.com
vpn-na-east.corp.salesforce.com
*.na36.force.com
hyd-wlc-a.internal.salesforce.com
sfdc-x579t5.perf1i.login.pc-rnd.salesforce.com
*.na107.force.com
*.na86.force.com
*.cs30.my.salesforce.com
sfm-anchor-a.internal.salesforce.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
mx2-cdu-sp1.mta.salesforce.com
cs308.salesforce.com
preprod.bluetail.salesforce.com
hyd-wlc-a.internal.salesforce.com
qa-api.docs.salesforce.com
umps1-c2-frf.salesforce.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
mx3-ord-sp1.mta.salesforce.com
mx2-frf-sp1.mta.salesforce.com
*.cs15.force.com
brand.salesforce.com
ora-ccore-wp001.internal.salesforce.com
*.cs173.force.com
dns-vetting1l.map.fastly.net
slotmatchinggs0.salesforce.com
perf1-useast2.cloudatlas.perf1o.pc-rnd.pc-aws.salesforce.com
dns-vetting1a.map.fastly.net
mx4-ord-sp2.mta.salesforce.com
*.eu25.force.com
cs225.salesforce.com
*.na18.force.com
mx3-frf-sp1.mta.salesforce.com
*.na74.force.com
www-perf2-pub.salesforce.com
*.cs115.my.salesforce.com
*.na38.force.com
app.datorama.com
*.na137.force.com
cmn1-wlc-a.internal.salesforce.com

Certificate

The complete raw certificate details for mx2-was.mta.salesforce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvALBU1vW/Cx5WnBwdP4
/fJzWrQ77JK2rH39dl3Cb0twYl+AcVRrWe0m0/YMkF+pWxs3fYDkJa+QGOxcBfNF
VgGGrzEeSCDG7ut0+dw6yck85BD0pnuZ4BJCCohGh+PGjXdb5eSOlLkD8SjkubjB
3HBPgWKbAMZnx1fkWGBiG1fQr1JSffaVS13FxxYPCzY2BYJf8EQzKl4PulvMPgW1
Tl/2afawpAQ5batiKr7rR+SgErefMpGliXHPkWRruWkSPCLjVembnq+pA2C6+dSy
oDY71/I86NTUFHxcl6hTg05G8jHHcA1vdMIcXHUtGFdNG55hgttoC46o4gyp/BvW
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603674826844524334830339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-26 21:38:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-26 21:38:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Applications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx2-was.mta.salesforce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19559068604256973052817732591465207950251112237025464551663778014296357382150727245165788110541554518906381358768775892183249023159838771268326536442340709583345987538137553750044699543756098393882757122591679890109147869049811182586967074046624006115425476817072462370336918205674029611489069667047780349448498357734414843273434287690798317928439395265083583531945923175442329790387037913691755136894582665929598507044817546432853154214950116164950125932773596642411712170312498426972582535104764422326745182196809609139840259053097708354120670378082605701434281631327191393145217925160929336255310370567859784636147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc1a1d338ccf89fcef4e0c1dbfdb998488b2d2ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2-was.mta.salesforce.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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