*.test.kalixa.com

- Kalixa Services GMBH -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:43:77:0b:43:27:8c:4e:11:30:14:fa:4f:59:d6:25 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kalixa Services GMBH

Organization: Kalixa Services GMBH
Organization unit: IT
State / Province: Wien
Locality: Wien
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:43:77:0b:43:27:8c:4e:11:30:14:fa:4f:59:d6:25
Serial Number (int): 3008754380127593738994563231386293797
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 46:c0:71:f5:62:59:29:d6:ea:15:af:b6:af:4f:54:5d:45:9e:15:ac
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): e7:e1:df:b3:03:14:96:30:42:09:9e:f3:e6:f6:54:65:26:71:3a:c8
Fingerprint (sha256): 18:ec:47:3b:91:70:d9:d7:57:b9:bb:59:31:b3:4c:f5:cc:f3:14:7a:54:ea:21:9e:0e:2d:04:d0:9e:86:06:ff

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.test.kalixa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.kalixa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.kalixa.com

Other certificates including the domain name kalixa.com

(limited to 100 certificates)
careers.rsaweb.co.za
careers.rsaweb.co.za
secure.kalixa.com
*.kalixa.com
careers.lewenet.com
kalixa.com
*.kalixa.com
careers.ukbts.co.uk
accept.kalixa.com
jobs.thepmocompany.com
developer.kalixa.com
careers.ukbts.co.uk
*.kalixa.com
jobs.42nerds.com
jobs.profitroom.com
careers.geninvo.com
careers.danecca.com
jobs.bamero.de
accept.kalixa.com
careers.rsaweb.co.za
www.kalixa.com
emailrewrite.kalixa.com
*.test.kalixa.com
accept.kalixa.com
*.test.kalixa.com
careers.rsaweb.co.za
careers.blueprintsecurity.nl
developer.kalixa.com
careers.ukbts.co.uk
customer-recruit.zoho.eu
kalixa.com
*.crm.kalixa.com
careers.kalixa.com
careers.tecamb.it
careers.rsaweb.co.za
careers.ukbts.co.uk
careers.ukbts.co.uk
*.kalixa.com
hris.kalixa.com
TEST.SECURE.KALIXA.COM
careers.tecamb.it
accept.kalixa.com
TEST.ADMIN.KALIXA.COM
jobs.spectrum-dm.de
careers.ukbts.co.uk
careers.rsaweb.co.za
jobs.silverside.com
careers.ukbts.co.uk
jobs.madas.gmbh
jobs.aarini.eu
customer-recruit.zoho.eu
kalixa.com
accept.kalixa.com
careers.rsaweb.co.za
kalixa.com
kalixa.com
jobs.liverestaurant.co.uk
*.kalixa.com
accept.kalixa.com
careers.rsaweb.co.za
customer-recruit.zoho.eu
careers.tecamb.it
careers.rsaweb.co.za
careers.onqor.co.uk
jobs.tsn-media.com
recruit.cs.zohohost.eu
careers.rsaweb.co.za
customer-recruit.zoho.eu
careers.tecamb.it
people.cs.zohohost.eu
jobs.pd-con.com
developer.kalixa.com
careers.rsaweb.co.za
people.cs.zohohost.eu
developer.kalixa.com
empleo.imf.com
*.kalixa.com
developer.kalixa.com
recruitment.ncdigital.co.uk
accept.kalixa.com
careers.tecamb.it
crm.Kalixa.com
job.aorai-conseils.com
sip.bwinparty.com
test.admin.kalixa.com
accept.kalixa.com
customer-recruit.zoho.eu
careers.ukbts.co.uk
carrieres.porsche-informatik.com
careers.rsaweb.co.za
careers.rsaweb.co.za
developer.kalixa.com
careers.rsaweb.co.za
careers.kalixa.com
customer-recruit.zoho.eu
TEST.ADMIN.KALIXA.COM
careers.tecamb.it
accept.kalixa.com
developer.kalixa.com
customer-recruit.zoho.eu

Certificate

The complete raw certificate details for *.test.kalixa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlz4x5GM0bA6ZOzcJOHX
/QsXyVT0MPu+c0YQD/Aq2HrUBrPVr85q/mipNTeR6o/kMGQGyg9ItX0+jb1utfPD
FuPNYpB+jNhpLakjCLY/zRywTUWhPfwcJ7pyI8gtA5Wy1+xTuJ7LJHXTQSEUpbOX
Zten/D7bLibIH2RlzfeFkSbH0adqUJGlUj6EOOWaOhlHF+ozqYVIhkWGwD74i24g
jwqMVlHz5NJHBz6QenY9bnK/IViBol1bwn1/x6kMeVo5YvLbSDmhQivMBaaG7X5q
bVMEo+PGm6et/ulejulJ5cW0aCjWqwwNXbKCBlGAH9/BHYFoOwBEYorSz3a9eHNl
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3008754380127593738994563231386293797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kalixa Services GMBH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.kalixa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19486545065681146734885774468511836793361185750196845748989660121230084463141411258609234438921719646418854833410240744931322148267576376668867249319083322653561244168678448343709118767979927532261714004591685089629661232972811124197925568125371651609538883440855349623715641075278251110823534157532860271863359244045936973324676192450126794731305565317631986245397140585944864285607625718341255981369556085917849211304357111027211383967520370977974750511313595363382899508884747129776383682965410289440894296251686782435749978091895361351420705727372369290378028200148240872031526035663548701804430574387137311106313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46c071f5625929d6ea15afb6af4f545d459e15ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.kalixa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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