*.prooxim.com

- Clever Global S.A. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 09:e3:1f:ce:50:77:21:84:5c:04:d7:99:7b:e0:a4:51 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Clever Global S.A.

Organization: Clever Global S.A.
Organization unit: IT
State / Province: Sevilla
Locality: Tomares
Country: ES

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e3:1f:ce:50:77:21:84:5c:04:d7:99:7b:e0:a4:51
Serial Number (int): 13142348449553661105983933247429583953
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 1e:19:e2:34:d8:f9:49:3f:fa:37:43:7f:78:dd:65:62:c3:b9:44:ef
Fingerprint (sha256): 36:21:30:e4:45:02:61:f2:07:96:2e:62:8d:39:42:2e:bf:21:0e:14:a1:f9:e5:f9:5c:dc:6e:ff:02:91:d1:21

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.prooxim.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prooxim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prooxim.com
prooxim.com

Other certificates including the domain name prooxim.com

(limited to 100 certificates)
survey.abundantpower.com
artist.fizdi.com
customer.zohosurvey.com
customer.litecloudhosting.com
helpdesk.performia.com
helpdesk.performia.com
artist.fizdi.com
www.bhntrack.com
books.ctpl.in.net
www.prooxim.com
survey.themarketinfluencers.com
customer.zohosurvey.com
survey.abundantpower.com
artist.fizdi.com
survey.abundantpower.com
survey.multiplyinggood.org
customer.zohosurvey.com
artist.fizdi.com
autotempel.bdirect-iip.ch
artist.fizdi.com
www.prooxim.com
customer.zohosurvey.com
survey.themarketinfluencers.com
bubblewoods.games235.com
industry.lexer.dev
artist.fizdi.com
backend.prooxim.com
helpdesk.performia.com
customer.zohosurvey.com
survey.abundantpower.com
tech.fanai.io
survey.abundantpower.com
autotempel.bdirect-iip.ch
survey.abundantpower.com
artist.fizdi.com
survey.seaworldentertainment.com
helpdesk.performia.com
survey.leakdtech.com
www.prooxim.com
survey.abundantpower.com
customer.litecloudhosting.com
www.bhntrack.com
support.skyfluent.com
customer.zohosurvey.com
partners.junkcarboys.com
survey.abundantpower.com
survey.abundantpower.com
survey.abundantpower.com
helpdesk.performia.com
helpdesk.performia.com
partners.junkcarboys.com
jefftressler.com
helpdesk.performia.com
support.nwbt.us
support.skyfluent.com
survey.abundantpower.com
customer.litecloudhosting.com
www.prooxim.com
customer.zohosurvey.com
thetailorsco.ocminternational.com
survey.abundantpower.com
artist.fizdi.com
autotempel.bdirect-iip.ch
artist.fizdi.com
survey.abundantpower.com
demo.nou-nou.co.za
shenanigifs.com
survey.abundantpower.com
books.bemenderfer.com
finanza.mzconsultants.eu
survey.abundantpower.com
survey.chaskatours.com
partners.junkcarboys.com
support.skyfluent.com
customer-creator.zoho.com
helpdesk.performia.com
books.sidestreetmedia.cc
thetailorsco.ocminternational.com
attendance.brooklynsteamcenter.org
artist.fizdi.com
www.gtinsight-sandbox.co
partners.junkcarboys.com
prooxim.com
customer-creator.zoho.com
survey.abundantpower.com
customer.zohosurvey.com
secure.united.tax
survey.abundantpower.com
alameda.recyclist.co
*.prooxim.com
prooxim.com
autotempel.bdirect-iip.ch
customer.zohosurvey.com
survey.abundantpower.com
artist.fizdi.com
customer-creator.zoho.com
www.grapeia.com.br
helpdesk.performia.com
survey.pricetipper.com
*.prooxim.com

Certificate

The complete raw certificate details for *.prooxim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BSvgwHAfHJPiXUCs4T
jIMY0tQ/uL0l7uMnD8e2M+zmCXX3gI2gcezJMpXpN9Ik3rf4RQJxYpOqB7Ma4X9N
n9IG2NkjCzDIrpIgJkVudAqrs/oMbew9UrQ5OUlZ40JEQOqrlai/OrtDQiUfkOd5
jANC8OOmMGJPzUYuEuu0HTVrEYZ0Aq8udgbM2BeJXdnRGTgtuhLdmHKEolWwOyR1
5Wl/intUjXbeOM0d+A816VKCrxHf1jWfBPAozZIxpo3H8DXOwk33RnmaCNC1tSKG
j8N32GiomtQiOTJisJEyYrBclgzFBVSWXcLICNiUFKHvsL8hwxbHsz8eTP/VG1nk
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13142348449553661105983933247429583953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sevilla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tomares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Clever Global S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prooxim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26210387450546104366056746591638561119902287284877859319003467250437115857680040959213107390679807852318587547686808810221232504632596475479002395889710132503777906968436243809441254593890227547832814695470713627806960217134070537996009083673636218031891275670586499889153305110172923654945082225815869118442516238583491571645308788949066804620420597696184217530779360882333132649685808487143183588189947384395265642485957136815914419387713124696418504898046078430733850963109774508036397646662156357495557825973013174544885195498946654916646781848241800671724812994252920798575013318016066211171084667649603694879793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prooxim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prooxim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015edd754ddb0000040300473045022011ae2ca92045e417a03aa809710922a400aec6a5c11621b1557e8f6c7f9ccea0022100db95476d81ba008d2e8543053f43bd2a448a7f89700c5242b649aa0939016e58007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015edd754e160000040300483046022100b1b97c7657d247b7bf9005988a7c336bbe0dce947cbfc8f889aadbfedca8b7e50221008ece58425428cfff04873c85c93b1c3a796fe6cd342267b782fe1a89159dcc1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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