*.almosafer.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 15:cf:45:c1:8f:4c:57:a0:b2:db:b4:07:77:08:bb:85 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.almosafer.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 15:cf:45:c1:8f:4c:57:a0:b2:db:b4:07:77:08:bb:85
Serial Number (int): 28990008182846608445356379720745794437
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 88:aa:02:5d:05:72:70:57:6d:3a:b4:af:28:f5:ad:4d:56:92:06:80
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 3c:cf:af:50:85:5f:d8:ec:4a:a1:b3:b5:4f:4a:30:8f:a2:3e:1d:af
Fingerprint (sha256): 18:7d:75:aa:bc:b4:ef:1b:38:c8:df:ac:72:d7:cb:c2:82:cc:d0:a5:09:a6:17:63:7d:91:61:6f:95:be:94:9f

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.almosafer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.almosafer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.almosafer.com
almosafer.com

Other certificates including the domain name almosafer.com

(limited to 100 certificates)
www.jobs.almosafer.com
tsunilrao.com
cosasdeadministracion.co
link.email.almosafer.com
web-cms-strapi-prod-apps.almosafer.com
next-preprod-kw.almosafer.com
19035924.email.almosafer.com
www.raltech.in
alexzhovnir.com
almosafer.com
19035924.mktg.almosafer.com
links.email.almosafer.com
ar-manual.business.almosafer.com
protonlabs.io
*.almosafer.com
www.richardwillems.com
www.hackkosice.com
tajawal.com
agentline.app
sni.cloudflaressl.com
tajawal.com
sa.almosafer.com
mindscopetech.app
sandbox.byhook.com
noiremarche.com
6519114.automated.almosafer.com
*.almosafer.com
incapsula.com
link.mktg.almosafer.com
book.almosafer.com
codeaf.dev
morse.stevemaguire.dev
qa.almosafer.com
sni.cloudflaressl.com
sa.almosafer.com
dev.atomtech.cc
feedback.almosafer.com
links.email.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
*.almosafer.com
footballprenup.com
www.giggee.com
tajawal.com
app.rogueland.eventup.ro
cms-api-dev.almosafer.com
*.almosafer.com
en-manual.business.almosafer.com
refilingindiaadmin.estore.business
www.kanagrid.com
tajawal.com
cms-api.almosafer.com
next-preprod-sa.almosafer.com
sni.cloudflaressl.com
next-preprod-bh.almosafer.com
ablink.mktg.almosafer.com
app.floraum.co.kr
web-cms-strapi-dev.almosafer.com
incapsula.com
19035924.mktg.almosafer.com
business-dev.almosafer.com
almosafer.com
tajawal.com
ablink.mktg.almosafer.com
tajawal.com
flightstatus.stgairasia.com
business.almosafer.com
ae.almosafer.com
6519114.mktg.almosafer.com
app.almosafer.com
app.almosafer.com
sni.cloudflaressl.com
ridhhisidhhimartadmin.estore.business
bh.almosafer.com
www.jobs.almosafer.com
sni.cloudflaressl.com
next-preprod.almosafer.com
bo.clubup.it
oktoberfest.thepub.com.co
*.almosafer.com
secur.dev.assek.ca
sni.cloudflaressl.com
tajawal.com
kw.almosafer.com
next-dev-qa.almosafer.com
next-staging-qa.almosafer.com
svmjasrana.up-sl.in
business-dev.almosafer.com
sni.cloudflaressl.com
incapsula.com
tajawal.com
*.almosafer.com
business.almosafer.com
next-staging-ae.almosafer.com
host.almosafer.com
almosafer.com
alexzhovnir.com
19035924.loyalty.almosafer.com
*.next-dev.tajawal.com
next-preprod-ae.almosafer.com

Certificate

The complete raw certificate details for *.almosafer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNPT3gNltu/n97uQ+rl
NOQkmHgTPbmc0oLR2LjMXhDI6PzHQ+McGng7eNFVbNyN4VPkCKFQUJdgiGpyEWYR
Eb9VuhfGGHd9jk39cgNcb9Je34KWBPT6ykCWAk5eg2RxT0J1HG6UTW+Gs70z12bI
9D0nDYKYEJskYJOZm+5u+S2n6GjZldnLWlvDOqUMpVWAIuLg3Sn0tsGmtU2g7z0G
JyOP1L3Wlh0YNZho9Jimm6o4Gu9g/cVVdZrEaG+cy26pM0K1x/wrru4c4tD1zjqV
IKVqwg2Hk0qZPXZGbgbcNoXntH1Yf7W3XCcGJpnCKxBzzUnJw+U03hmr5NwphkC+
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28990008182846608445356379720745794437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 13:23:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 13:23:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.almosafer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25841035174081519294638406926426845161781857215333312521537272402496605459540104425954005443031329870347358840871770300668770634128634930797190597303481434454829806570699978034898287947208041387370982621185179317196870748487059837862853824000857602760508355431731500647513700714389174891991119093907977916018071289158365542054945435380274560924301032423381629247144359340731639130302083385807510821832164567511371685275553114385880649725496994032930790026458615275708856143419017883095074464026662069814284699525480422474412026555370369561836653201849933265981803940047212773485222496195004054659956451385420554485313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almosafer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almosafer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88aa025d057270576d3ab4af28f5ad4d56920680
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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