*.almosafer.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 34:44:ce:ba:2d:1f:3a:74:3f:c5:08:90:35:2e:66:b4 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.almosafer.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 34:44:ce:ba:2d:1f:3a:74:3f:c5:08:90:35:2e:66:b4
Serial Number (int): 69477124893977151751054155414927992500
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 88:aa:02:5d:05:72:70:57:6d:3a:b4:af:28:f5:ad:4d:56:92:06:80
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): c3:17:74:82:9a:d8:d0:76:03:15:4f:1a:6e:06:e7:e2:e4:af:10:28
Fingerprint (sha256): 06:95:53:f3:7f:9a:72:e0:12:d1:ef:6c:60:7a:99:21:e2:cb:d2:45:22:79:dd:db:8b:5d:5f:b8:9c:cb:4c:08

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.almosafer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.almosafer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.almosafer.com
almosafer.com

Other certificates including the domain name almosafer.com

(limited to 100 certificates)
www.jobs.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
www.artkom.dev
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com

Certificate

The complete raw certificate details for *.almosafer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNPT3gNltu/n97uQ+rl
NOQkmHgTPbmc0oLR2LjMXhDI6PzHQ+McGng7eNFVbNyN4VPkCKFQUJdgiGpyEWYR
Eb9VuhfGGHd9jk39cgNcb9Je34KWBPT6ykCWAk5eg2RxT0J1HG6UTW+Gs70z12bI
9D0nDYKYEJskYJOZm+5u+S2n6GjZldnLWlvDOqUMpVWAIuLg3Sn0tsGmtU2g7z0G
JyOP1L3Wlh0YNZho9Jimm6o4Gu9g/cVVdZrEaG+cy26pM0K1x/wrru4c4tD1zjqV
IKVqwg2Hk0qZPXZGbgbcNoXntH1Yf7W3XCcGJpnCKxBzzUnJw+U03hmr5NwphkC+
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69477124893977151751054155414927992500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 12:46:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 12:46:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.almosafer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25841035174081519294638406926426845161781857215333312521537272402496605459540104425954005443031329870347358840871770300668770634128634930797190597303481434454829806570699978034898287947208041387370982621185179317196870748487059837862853824000857602760508355431731500647513700714389174891991119093907977916018071289158365542054945435380274560924301032423381629247144359340731639130302083385807510821832164567511371685275553114385880649725496994032930790026458615275708856143419017883095074464026662069814284699525480422474412026555370369561836653201849933265981803940047212773485222496195004054659956451385420554485313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almosafer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almosafer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88aa025d057270576d3ab4af28f5ad4d56920680
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001dc1bd80e29f9825ae54153a3772c13019675b18105015b78257f2bb9956af20c3892821dd79b8a2f0f28e11297d4f10f1874182b27cb5f1476a156416f57ab6f544ac7f7f72a4dc2cd384f3a0aa283bf5c23954a3094cb81cf5f97ccd56e367330d0c334a7b05637af2cbfcaf91a8ab6ad9a4fcc5da15c4b41a2f242657ed6f904a003c859f06b92d3c28de4c019c032e89e9932d65c42a814559120121cc83f61253b662921b05a51f1417320657575940f3fe253a0394bf717b61169314c334f039db98697ef0c9ee58da3928f4dad1ed091f4a77f49d43713821e56a277fd5c49196dba93dcedef83508a4852ad65afdc86f404d34ad805b695639af2efa877fe294fe81ffba0fee1dd28b45d7ab651500b0c9c0001d170ca115300a883c5db9cc715e5b0ec39f4d261aceee4099aa1d3e4c14d042554bf8aa621d4d286f1dc53849c2e763c2b88a00c3f54b9d9fcca8e5a0ae99ce1d4eacad1e1f37b50b5e5012134eb5d080fe807a8bd3a45e141baf97871453950cb7338ba5d2f8ba6451cd7a83c45dfe39b916b14d1892b1ca263ade2720deb6fa0785c7fe9958e47df593e74b2d110cdb8aa781e5a94b792d6b4c66f91f8ce5a2c2dcde6d8172298e8d61f3c3c68534116e5b83a7165c89c1947a50fe69086825ab6932ba872eabf0f680459d60aa6ac218eb2b1a239b58f8b66f62db6c45b2197b0c323ec3bc7fbd