insurtechboston.com

- Applied Systems, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 61:d2:ef:ec:24:eb:6d:9b:5c:2e:ab:b7 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Applied Systems, Inc.

Organization: Applied Systems, Inc.
State / Province: Illinois
Locality: University Park
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:d2:ef:ec:24:eb:6d:9b:5c:2e:ab:b7
Serial Number (int): 30275053376470891552578644919
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8d:7f:74:2c:e3:54:7c:9c:61:82:e4:34:34:fb:09:55:e5:7a:c1:ac
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 05:10:25:a2:2f:2f:e8:64:46:0e:b5:4e:31:39:3a:19:8f:c5:86:39
Fingerprint (sha256): 1d:05:15:29:3e:2b:b3:3d:5b:0d:88:2f:ad:a6:67:f2:01:c1:88:d6:49:8e:45:37:17:09:ca:dd:40:de:1c:87

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate insurtechboston.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insurtechboston.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insurtechboston.com
prod.insurtechboston.com
prep.insurtechboston.com
int.insurtechboston.com
www.insurtechboston.com

Other certificates including the domain name insurtechboston.com

(limited to 100 certificates)
staging.facemap.ai
www.filipearruda.com
www.ideaxe.com
www.comma.ai
insurtechboston.com
app.ppenv-wekicards.com
insurtechboston.com
insurtechboston.com
ev.d-brief.me
www.linkyro.com
wylynko.com
mamarepedia.com
liliansouk.com.br
www.comma.ai
www.insurtechboston.com
websitefails.com
spaza.tech
www.gaymerstreams.com
insurtechboston.com
z5ottu.hu
barz.app
www.agialll.com
app.teachermate.co.uk
wylynko.com
auto.ia.ca
wwtmeatme.app
api.producer.chat
www.carechampapp.com
insurtechboston.com
gaymerstreams.com
app.ppenv-wekicards.com
duckstack.com
cocoslab.lotusfa.com
pos.phongvu.vn
walkdeeper.com
www.dbyagmich.com.au
www.akylab.com
www.carechampapp.com
www.insurtechboston.com
heldercardeira.com
www.trappsquare.com
www.dbyagmich.com.au
go.dishful.app
luacesgolf.com
www.chattirealtors.com
blog.richardli.zone

Certificate

The complete raw certificate details for insurtechboston.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JsEfKrCGMOx4hYsVW+b
3UObpx5d+Yhc4CdYQlHeG93Sz8/X6HitN1aK7UZfbIpormcci8/knbhCAnOtq6Ro
0EH+ZVNC7a0feZ3+AjdGdY1a4D7bP9v2F29xSw+WGYDmOPoX+YNxa5fQVv4o+uWu
hZ2P39/GmSTx6MEo7W9B6/aA6rRQAWcPG8rNBgRV6641zPlfqEYkkK7/oHH8RCHY
9KkNJLsjpV+/+9vqLwnO40j7UFmJuvc5OfyrC8yc88egR1lQGdThmulmWp37JGEp
hsJjf3C0E+d1WqHe73V1UxBrx2WOR1ikF3Ok54c6hkMFZFz8iKpSWAfiG7+wqhHy
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30275053376470891552578644919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 19:01:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 19:01:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Applied Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insurtechboston.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26334009424668005948827935278484354706178100863373904602887104049212725992124523888439601456290562922366325871309492671469745381712366862859630075875280891841990215807474799501739164669762502228764965656931441104339302005777412282840098822421364291724756961318965378378780956605354338391176350369725456475443867601448962478919446813000459993545782777768323788403320110412445008810745831423127579837201742997981131174733004171096348464008288491011888584493603901282303629003035915098574748445058536787944565263312156439437478326571576251547446867140193903239145037307140307172842093591708093075015497232424471058576031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurtechboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.insurtechboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prep.insurtechboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.insurtechboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insurtechboston.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d7f742ce3547c9c6182e43434fb0955e57ac1ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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