cfl.dropboxstatic.com

- Dropbox, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:e8:76:ed:8f:23:bb:a0:23:41:a5:e5:8b:e8:ef:ed was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dropbox, Inc

Organization: Dropbox, Inc
Organization unit: Dropbox Ops
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e8:76:ed:8f:23:bb:a0:23:41:a5:e5:8b:e8:ef:ed
Serial Number (int): 9182392991596876869690652291697799149
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ac:37:f4:e0:20:6d:e3:95:49:ca:d0:5b:73:d2:b4:60:a4:3c:1a:05
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e6:a8:93:7e:63:5a:ad:11:ae:2d:ba:5a:2c:bd:bc:a9:0b:f6:7a:97
Fingerprint (sha256): 54:f0:6f:3c:f6:25:2d:c9:b6:a3:29:36:b5:25:25:28:83:11:de:a3:0e:3b:0f:77:eb:14:68:99:8c:3c:18:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate cfl.dropboxstatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfl.dropboxstatic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfl.dropboxstatic.com

Other certificates including the domain name dropboxstatic.com

(limited to 100 certificates)
*.dropboxstatic.com
cf.dropboxstatic.com
*.dev.corp.dropbox.com
cfl.dropboxstatic.com
*.dropboxstatic.com
rebrand.dropboxstatic.com
customer-growth.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
paper.dropboxstatic.com
paper-desktop.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
paper-desktop.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
clientupdates.dropboxstatic.com
fjord.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
paper.dropboxstatic.com
cfl.dropboxstatic.com
clientupdates.dropboxstatic.com
cf2.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
ac.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
flash.dropboxstatic.com
paper.dropboxstatic.com
clientupdates.dropboxstatic.com
rebrand.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dev.corp.dropbox.com
*.dev.corp.dropboxstatic.com
showcase-marketing.dropboxstatic.com
*.dev.corp.dropbox.com
paper-attachments.dropboxstatic.com
*.dev.corp.dropbox.com
ac.dropboxstatic.com
customer-growth.dropboxstatic.com
paper.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
*.dev.corp.dropbox.com
anti-abuse.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropbox.com
cf.dropboxstatic.com
dropboxstatic.com
healthcheck.dropboxstatic.com
showcase-marketing.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
paper-desktop.dropboxstatic.com
*.dev.corp.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com

Certificate

The complete raw certificate details for cfl.dropboxstatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56MbWcpQnVVfq1CEWUek
fbS0YSlgdiV8ij7XefN0T51EazcavgLsbohOhcbg2pDIP/wufF4PAa+hIBpX8j6N
htJO41AG5qZ+pIbs0uPDO2ms+ujfhrflmcmejlxsODQkatm4Mz23WMxbiBR+UmkK
HmnKC+6WCP7c2xcotT8PEnjqjV4MdiRPr66Za67VXZPO7Dj3bvEa41ISz+2Nbj9S
lz2k98ipHwA9JG9tFccMnFOenhXJnFRIIQ7Eq6CImJgifq3G/GdreOSXXeOu/Ym5
iYiuYpL/hrJdSZotiXcfjMnJUtQG+SarJgGiy4ucheBbMA2FrSAbaQzdxMVDuhik
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9182392991596876869690652291697799149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dropbox, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dropbox Ops'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfl.dropboxstatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29241479427095779611666544795156708549066161164960813275848669200041645057486458601088333367352459343720027960780398335514211764452755988797371309431734328880600401283702404584390233789220470650632091572216060731684221907188911367315765816747757010183740224595541396425912357285284528410949363473146086806491691476251498358888428953910497052214484023325425207165079997584655284601236900601114397666923905971794403412244578017929608733957091224237810067317583830387832147322385549359910803208003492001560503754837947448497493224032258007728868972759137668937453670995124554189570945231237494154230951939973234015380481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac37f4e0206de39549cad05b73d2b460a43c1a05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfl.dropboxstatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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