*.cakemarketing.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 02:25:d7:ad:30:ee:1a:4c:1b:a8:01:98 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cakemarketing.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:25:d7:ad:30:ee:1a:4c:1b:a8:01:98
Serial Number (int): 664718778574757614848573848
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: af:93:40:0f:94:3d:d7:1e:2b:62:4e:77:1b:1d:4d:b2:e5:83:85:93
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 57:a2:fd:20:4c:e6:87:aa:a0:25:67:15:41:2c:ac:79:80:dd:6f:57
Fingerprint (sha256): 00:1c:2b:79:1b:dc:69:3c:d0:11:e7:06:4f:7c:f4:f6:3d:b1:f8:e8:57:f4:ff:7c:e0:2b:f4:c2:9f:1d:a7:a7

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.cakemarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cakemarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cakemarketing.com
cakemarketing.com

Other certificates including the domain name cakemarketing.com

(limited to 100 certificates)
*.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
m6.cakemarketing.com
*.pie2trkv3second.cakemarketing.com
*.v3trk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
m17.cakemarketing.com
*.v3trk3.cakemarketing.com
dev103.cakemarketing.com
*.v3trk1.cakemarketing.com
*.jrnytrk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
dev103.cakemarketing.com
m6.cakemarketing.com
staging.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-011.cakemarketing.com
*.mtr-test-006.cakemarketing.com
demo-new.cakemarketing.com
*.v3trk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
whitelabel-demo.cakemarketing.com
*.v3trk3.cakemarketing.com
*.v3trk2.cakemarketing.com
*.v3trk1.cakemarketing.com
*.v3trk2.cakemarketing.com
*.v3trk.cakemarketing.com
prod1.cakemarketing.com
*.v3trk3.cakemarketing.com
*.v3trk3.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
pie2v3.cakemarketing.com
*.v3trk1.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.demo-newtrk.cakemarketing.com
whitelabel-demo.cakemarketing.com
*.v3trk3.cakemarketing.com
*.v3trk.cakemarketing.com
m17.cakemarketing.com
newportbanc.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk1.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk2.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk1.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.vanity2.cakemarketing.com
*.stagingtrk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
m7.cakemarketing.com
www.newportbanccfa.cakemarketing.com
*.v3trk2.cakemarketing.com
*.v3trk2.cakemarketing.com
*.v3trk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk.cakemarketing.com
*.demo-eu1trk.cakemarketing.com
*.v3trk1.cakemarketing.com
*.v3trk3.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.v3trk3.cakemarketing.com
*.prod3trk.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.mtr-test-006.cakemarketing.com
*.demo-newtrk.cakemarketing.com
*.v3trk1.cakemarketing.com

Certificate

The complete raw certificate details for *.cakemarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1rtaHDiihOA8pKfqZ0
cBeT//QxCXKeDP6s4k2bw9HTLg4BQI+CU0MFuXDccMXIM2ttAe1kKA4tP3f/ZaID
F/jEvuxS9yhs0PdRc+1LTBwSe/pcaUmFGljlnHl1uIhKLFr6cHumNrH2bpTrOmcM
tZjV3A/BmjX4vVNhUyM9ya7ElFtmTatKDHdlVF57y3bziQmKYYB8C+YJsru83BT8
mgd1Yyie2EJqG2NhTiO4t09gOUiUF/mFkktOd9AkvGmVBHSdBIR/l0GjAqia276w
W4w1lIl66aJq0kD+Q3AW+N/W1UMUF3wZa72DRjUt4vpgbOoVV5ZYKApekmw60WC4
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 664718778574757614848573848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 19:57:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 18:31:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cakemarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20299425536959412977641159142968978829967135758789295142339566711783477982655666928589983023915711487527089918755002656475895423825569103952962936023149832037759927647205990132824524926964165897734748891821980883488939483196307917519754935820382541809746929070007394614546796027986541765691959795239109664684451123662974972051350284598985516582440279645810189290275731354466362019487005181297902410549287676923566309496065361851080483864503892231912860339195634186762231340061557959351915674019134439990450561309390989255686600013844749604087484065833132503172278080623974768833798997401725326932560914713984851032221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cakemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakemarketing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af93400f943dd71e2b624e771b1d4db2e5838593
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016829e3e5b1000004030047304502210097cd523f574ac8a4ffc43da4ea232e461b0042f3f05ec14b012783e3a77352a602203b745012f4efd82089ecfab5bd0924eee1ad7ab4b8d304b24e3d9cc288686f470076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016829e3e54b0000040300473045022100fc6350e97ada02a3ef4000abebd4ad855a7d492f9ccb0ff7fd11f3fc8541169402205e9db5a6f687fe43b97a7e9ddcb92cb608bba1b427d5f3de711288e890c4601c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00925e47285abbfd2d570a2c5492dc18b2ab33e5ed6182f8008fa1f6ab4a3394687480fd8421ad8f6d6ee12f8c791bc8f0f07a500956cebb3b7c4324d6f3bd70b811ac47a161ce09b7edd136f9ff0fdd16924d4d69b0c64132d9bf9d398c1b317e9ea0a624027eb4936619028958016d6fc186138227ccc1267d0ad53dca44b2f5540452391a759e97211c620ff26db3312535e0b7b2ad78a3c68a1282361a385f07f4b281f7635528110afcad41f9bed8152278d7e65b9e78c88cda019c2d405b19d25f7570e928edf505c580d75bf79b4d6fb20e00a24c2623e3f68b2c7b5df390da034cba2d9fc2a9a2fa54b14998918514df70b8fa54e82825993d718f0907