b2bqa.globalcrossing.com

- Level 3 Communications, Inc -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 25:5e:08:a4:42:9a:5c:6b:3c:a6:97:4e:01:ad:ec:03 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Level 3 Communications, Inc

Organization: Level 3 Communications, Inc
Organization unit: 779 IT
State / Province: Colorado
Locality: Broomfield
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:5e:08:a4:42:9a:5c:6b:3c:a6:97:4e:01:ad:ec:03
Serial Number (int): 49669687022052264307555298977260628995
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): bf:fa:d0:1b:19:cc:7a:98:5b:53:5b:0a:c9:94:0c:6a:dd:bd:b2:f3
Fingerprint (sha256): 0f:a8:4a:c9:5f:06:64:e6:16:bb:b0:51:77:ec:25:8d:48:91:1f:cc:68:9b:f2:28:5c:07:18:8b:cf:67:33:18

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate b2bqa.globalcrossing.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b2bqa.globalcrossing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2bqa.globalcrossing.com

Other certificates including the domain name globalcrossing.com

(limited to 100 certificates)
edge-ext.globalcrossing.com
zextsvcz.globalcrossing.com
enrollment.globalcrossing.com
uptime.globalcrossing.com
b2bqa.globalcrossing.com
b2bqa.globalcrossing.com
ecd.globalcrossing.com
lyncdiscoverinternal.globalcrossing.com
dialin-na.globalcrossing.com
extranet.globalcrossing.com
b2bdev.globalcrossing.com
dialin.globalcrossing.com
meet-na.globalcrossing.com
api-nvt.globalcrossing.com
tools.globalcrossing.com
api-dev.globalcrossing.com
ucommand.globalcrossing.com
api.globalcrossing.com
b2bp.globalcrossing.com
meet-na.globalcrossing.com
uptime.globalcrossing.com
owa2007.globalcrossing.com
xextsvcx.globalcrossing.com
desio.globalcrossing.com
b2bdev.globalcrossing.com
globalcrossing.com
activesync-roc.globalcrossing.com
owa-test.globalcrossing.com
b2buat.globalcrossing.com
cwa.globalcrossing.com
ecd.level3.com
myapps.globalcrossing.com
securityforms.globalcrossing.com
ucommand.globalcrossing.com
glbcap1.globalcrossing.com
webvpn.globalcrossing.com
apidev.globalcrossing.com
api-qa.globalcrossing.com
dialin.globalcrossing.com
meet.globalcrossing.com
api-dev.globalcrossing.com
uptime.globalcrossing.com
lyncdiscover.globalcrossing.com
api-sbe2.globalcrossing.com
uptime.globalcrossing.com
api-sb2.globalcrossing.com
owa2010.globalcrossing.com
owa2007.globalcrossing.com
desio.globalcrossing.com
globalcrossing.com
web-na.globalcrossing.com
glbcap1.globalcrossing.com
glbcwces.globalcrossing.com
glbcap1.globalcrossing.com
api-qa.globalcrossing.com
api-sb2.globalcrossing.com
ews.globalcrossing.com
ecd.globalcrossing.com
smtp.globalcrossing.com
share.globalcrossing.com
myapps.globalcrossing.com
activesync-test.globalcrossing.com
lyncdiscover.globalcrossing.com
owa2007.globalcrossing.com
YEXTSVCY.GLOBALCROSSING.COM
web-emea.globalcrossing.com
ucommand.globalcrossing.com
cu4web.globalcrossing.com
ap.beta.globalcrossing.com
owa2007.globalcrossing.com
b2b.globalcrossing.com
apidev.globalcrossing.com
owa2010.globalcrossing.com
glbcap1.globalcrossing.com
activesync2010.globalcrossing.com
cwa.globalcrossing.com
api-sb2.globalcrossing.com
apm.level3.com
api.globalcrossing.com
confsummary.globalcrossing.com
uptime.globalcrossing.com
owa.globalcrossing.com
xextsvcx.globalcrossing.com
api.globalcrossing.com
confsummary.globalcrossing.com
ecd.globalcrossing.com
enrollment.globalcrossing.com
glbcwces.globalcrossing.com
desio.globalcrossing.com
yextsvcy.globalcrossing.com
b2bdev.globalcrossing.com
b2b.globalcrossing.com
cwa.globalcrossing.com
share.globalcrossing.com
api-sbe2.globalcrossing.com
api-sb.globalcrossing.com
apidev.globalcrossing.com
enrollment.globalcrossing.com
b2bp.globalcrossing.com
apicert.globalcrossing.com

Certificate

The complete raw certificate details for b2bqa.globalcrossing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVqxrHe158jtAC/E83u6
zp2qqo8vf8I12xUZaEH5aIL5xXIKQU04RpOqczY5ytL/Zv0CVvo3F1tsHY/61Yus
qndM2mEq+vz+Jiz8yy5KgcDEyalIr9jzfcrYa4o7kDV+p62pl1wRfCD+9jRFRs4L
Sv5ZEhjR0m09WiGwsDIkbmRJEJVBqmtdVr2XXDiUCTYNTMpqFD0sKVUFdolmZr8M
ONio0/rYXguqSwR4oTOhY9s+f4QF+7fra0LapkWZSHeLDE2SZ/OJd6nSvBwA2XY7
fcUkQdZX8y7zfgE0xn3pPyBV/EBUclxd4mvB3zlL79vgF8wCoOUcBFoIX1KtDnaN
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49669687022052264307555298977260628995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Broomfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Level 3 Communications, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '779 IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'b2bqa.globalcrossing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22893856095788828886339840271018084589848761999986320054660667414924917422794392450233901748119815347761547843550244729034717058776726117300175216015946980627243569518095961891629388463738173166704909932577084094015736224836038348495759168232999597760820144866386213367298048877284578569983778410536443593789921730934756739955976173127732654077620804434629598264254090495973585599305508571049546807416104159154926057242803844994304261548908362388657192597921237511371174675600682815242358621779962473165566264809784175132938198554998335272768336365739672384865178933669788535942177356420463459719437917564185014078897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bqa.globalcrossing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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