birstupdates.bws.birst.com

- Birst, Inc. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 5e:3a:2d:17:be:d0:b5:4d:83:6d:fc:47:f9:01:03:39 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Birst, Inc.

Organization: Birst, Inc.
Organization unit: Operations
State / Province: California
Locality: San Francisco
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:3a:2d:17:be:d0:b5:4d:83:6d:fc:47:f9:01:03:39
Serial Number (int): 125249499411311478823400076716212814649
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 3e:70:89:ee:6c:9d:6a:5c:6a:b2:48:7d:59:da:b2:b9:ff:06:8d:4b
Fingerprint (sha256): 0b:12:32:a1:75:cc:03:0e:df:6f:b3:b3:37:f8:b8:dd:6c:bb:4b:3c:52:9b:a4:29:d4:20:b9:5b:98:15:2f:d3

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate birstupdates.bws.birst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birstupdates.bws.birst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

birstupdates.bws.birst.com

Other certificates including the domain name birst.com

(limited to 100 certificates)
webdav.birst.com
app3112.bws.birst.com
mrc.bws.birst.com
btm.birst.com
5663998322147328-fe1.pantheonsite.io
maps.bws.birst.com
app2101.apac1.birst.com
app2102.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2103.apac1.birst.com
sde.birst.com
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
rc.sde.birst.com
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
birstupdates.bws.birst.com
login.bws.birst.com
app2102.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity2.lithium.com
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
licensing.bws.birst.com
5663998322147328-fe1.pantheonsite.io
*.bws.birst.com
mrc.bws.birst.com
vanity1.jiveon.com
c43rc.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
stage.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac2.birst.com
vanity2.lithium.com
app2103.bws.birst.com
freetrial.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2101.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
mrc.apac1.birst.com
partners.birst.com
birstupdates.bws.birst.com
bwa.birst.com
login.apac1.birst.com
app.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
rc.birst.com
app2102.eu1.birst.com
rc.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
dev.www.birst.com
app2101.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
stage.sde.birst.com
stage.sde.birst.com
5663998322147328-fe1.pantheonsite.io
static.captora.com
*.saml.birst.com
login.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
btm.apac1.birst.com
mail.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
app2102.eu1.birst.com
app2101.bws.birst.com
login.bws.birst.com
vanity2.lithium.com
sslvpn.birst.com
app2103.bws.birst.com
vanity1.jiveon.com
static.captora.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
www.birst.com
app2103.apac2.birst.com
app2101.apac1.birst.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
app2101.apac1.birst.com

Certificate

The complete raw certificate details for birstupdates.bws.birst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0KUnybxUWaFtIozsC2h
rQonwPHspchVS87aOaRIR+iWKscDH3ZPPL7odvjh5o/RNyDX9RbLs+ImSa+WDiyP
TTn5RXyfKBvf8HeTz4rge0aKrwD8ty6LzEAIHWexpAGNdgQMrHYUd0vBddGAVor5
T4aVTTc2GX5jxvTpD9wEGQ0iMzos0IDLGMZHEbb0o/23UuRtfW1tqqZutx0vWIVW
IyadGPvx56FmPexyyxj4dwftx4FX5Lu6GfCZNEJinEYMHi01MjO31SZxaYk61F/J
Y/M9tmtR4R5LGVm14wAEkbet+1O/uhk04/XSZ/oZNSiC/lju321S6v+oExbCoHZP
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125249499411311478823400076716212814649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Birst, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'birstupdates.bws.birst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25154254782829966946558755554463295414924605092303473084192036646686039612828501482585212742514636175737103045864460791614574512635303464457988963910352137777645517596225427334146415208399278717039784091863015726608892957815354061317206939375480437754872459883324791845212375266655964309919974629576238184829070924886903613519046480385986291462705448216852928356102076396055107698789210027717533448887017767818291055545345901418727370946606753043189626286632085225976193324237535268286617200794808106568901715753424910616385288267843416310457605289131303901514789135526233440388473266618450166049397989318227630903063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birstupdates.bws.birst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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