about.kubity.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 56:bb:53:f3:eb:5f:d7:8b:29:f8:4f:42 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=about.kubity.com,OU=Domain Control Validated by OneClickSSL,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 56:bb:53:f3:eb:5f:d7:8b:29:f8:4f:42
Serial Number (int): 26842176428841011372380147522
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6d:e2:02:ff:86:f2:ec:79:69:12:d7:c8:dd:50:6f:fe:6c:8d:a1:65
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): f5:90:5e:97:ed:a9:6a:9f:a6:c1:e9:e5:23:43:28:92:32:d6:27:05
Fingerprint (sha256): 33:29:10:54:58:5a:59:5a:02:61:59:fd:0b:3f:ac:4b:45:ee:73:a2:fa:46:eb:7f:e7:ca:f5:4c:3f:c9:fb:89

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate about.kubity.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for about.kubity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.kubity.com
www.about.kubity.com

Other certificates including the domain name kubity.com

(limited to 100 certificates)
ghouse.zedext.com
tls.automattic.com
tls.automattic.com
play29.com
deckf.org
tls.automattic.com
tls.automattic.com
preprod.mirror.kubity.com
helios.vade.ai
geccele.tech
app.kubity.com
sri.mandirr.com
mirror.kubity.com
www.kubity.com
preprod.mirror.kubity.com
www.newjoshicateringservice.com
preprod.mirror.kubity.com
mirror.kubity.com
about.kubity.com
farmart.com.au
*.kubity.com
getsleeptimer.com
tls.automattic.com
app.kubity.com
*.kubity.com
preprod.mirror.kubity.com
pro.kubity.com
pro.kubity.com
mirror.kubity.com
*.kubity.com
*.platform.kubity.com
*.preprod.kubity.com
pricingdev.corp-internal.rxo.com
*.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
tls.automattic.com
mirror.kubity.com
about.kubity.com
*.kliporchestrator.kubity.com
dulux.o4s.io
about.kubity.com
a0a2.foodle.su
pro.kubity.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
mannfriday.com
mirror.kubity.com
tls.automattic.com
tls.automattic.com
*.kubity.com
duelingground.swingteam6.com
pro.kubity.com
auth3.hiddenlogin.com
www.fisicolega.com
www.germanmutualia.com
dev.admin.kubity.com
preprod.kubity.com
rxodmsmain.corp-internal.rxo.com
pro.kubity.com
*.kubity.com
tls.automattic.com
*.kubity.com
www.biryanijunctionpa.com
course.emipd.tw
pro.kubity.com
pro.kubity.com
*.kliporchestrator.kubity.com
www.epayindia.com
helios.vade.ai
tls.automattic.com
pro.kubity.com
www.sheremetiev.pro
backend.kubity.com
tls.automattic.com
shangjunjiang.com
preprod.kubity.com
tls.automattic.com
deckf.org
mirror.kubity.com
tls.automattic.com
tls.automattic.com
mirror.kubity.com
maskmydata.com
*.mirror.kubity.com
tls.automattic.com
app.kubity.com
go.kubity.com
mirror.kubity.com
tls.automattic.com
preprod.mirror.kubity.com
tls.automattic.com
about.kubity.com
preprod.kubity.com
tls.automattic.com
tls.automattic.com
pro.kubity.com
pro.kubity.com

Certificate

The complete raw certificate details for about.kubity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlohowe4tJRgazgKtEf0R
dgnAQaVyyJaIJG+ksFIM9wxhYF2lG/n7NC1MZsfM2M6vaMxSbWmokWv2JMvwVd1p
YZ1qo/Ide48DEfY3EDpXWr257hrq29SmD1c+5+rhJwhdG9RnlawKMkXtNIqB/sx5
TRMsXdENsW/D5sBdrcbTJPo8wURdzoGwECYZzQiBEwowv6AGluu7WqM00S/kbbwT
EZDDGUoXBeJCf8jimrDEj48AvfpR1XN9xBPd4NJrXX7+ZnVp0pR8QtJ65plohgeu
tC4j8txcY4uPN6dg+kaySAviazpkVVhr5MZSdzuBbWZnk3/qvimSqyab/hJN+KZm
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26842176428841011372380147522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 10:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 10:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'about.kubity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19003011632971042347982410174172971492919837652564457148538714803599026008091878040904269380129936108219796087401821604925532160210269155882523435631231955652341520338726349512212148261498031113584717735262939616721832077075014918961982113034722652575260445106841345274755073137895608859755956465996243733615121953269454069476974725222823454345635516164568898543716308183683591104729820463398957369244504377204946735750042458280501791957442961843929889084289061736102167797233550895914399085471756115583063928213792010464272818192366451924339858185706442463120456085518926908302828730785473326566430243191470757930549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.kubity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.about.kubity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6de202ff86f2ec796912d7c8dd506ffe6c8da165
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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