www.simplicitycrm.com

Issued by Thawte DV SSL CA

About this certificate

This digital certificate with serial number 67:9d:58:ed:28:96:b4:90:09:13:a7:46:8d:46:1b:81 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.simplicitycrm.com,OU=Go to https://www.thawte.com/repository/index.html+OU=Thawte SSL123 certificate+OU=Domain Validated

Thawte, Inc.

Organization: Thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:9d:58:ed:28:96:b4:90:09:13:a7:46:8d:46:1b:81
Serial Number (int): 137727477814317532023164842728462097281
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ab:44:e4:5d:ec:83:c7:d9:c0:85:9f:f7:e1:c6:97:90:b0:8c:3f:98

Fingerprint (sha1): 05:8d:2a:37:89:67:70:b6:13:27:8c:ba:9d:c4:69:2c:31:e2:78:69
Fingerprint (sha256): 55:e5:af:b4:d6:bc:41:a7:8f:07:84:ec:b1:d0:cb:cd:8b:fd:28:29:9d:c9:1c:69:2d:fb:5a:6c:93:13:17:f7

Issuing Certificate URL: http://svr-dv-aia.thawte.com/ThawteDV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl

Check the revocation status for certificate www.simplicitycrm.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.simplicitycrm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.simplicitycrm.com

Other certificates including the domain name simplicitycrm.com

(limited to 100 certificates)
mta.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
outlook.simplicitycrm.com
sareports12.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
services.simplicitycrm.com
*.simplicitycrm.com
www.subway.nz.simplicitycrm.com
legacy.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
dev.cis.simplicitycrm.com
autodiscover.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.subway.nz.simplicitycrm.com
staging.rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
outlook.simplicitycrm.com
autodiscover.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.casemanagement.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.services.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
sentinel.simplicitycrm.com
www.mcm.simplicitycrm.com
rightaddress.simplicitycrm.com
www.nestle.ninhcp.simplicitycrm.com
beacon.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
sentinel.simplicitycrm.com
*.simplicitycrm.com
rightaddress.simplicitycrm.com
dev.cis.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
www.simplicitycrm.com
test.subway.nz.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
rightaddress.simplicitycrm.com
www.jrdutyfree.simplicitycrm.com
outlook.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.jrdutyfree.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
dev.cis.simplicitycrm.com
www.holden.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
insights.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
beacon.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
autodiscover.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
*.simplicitycrm.com
test.subway.nz.simplicitycrm.com
*.simplicitycrm.com
test.rightaddress.simplicitycrm.com
rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
demo.simplicitycrm.com
www.holden.au.simplicitycrm.com
rightaddress.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
www.nestle.au.simplicitycrm.com
beacon.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
reports.simplicitycrm.com

Certificate

The complete raw certificate details for www.simplicitycrm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjAYEcehPAFToSYZPFBN
le+4jQNb2Ig5VGdThtK3pCNy0eTk0+zKa0N0ox3NZ8rdWlfpVuJtb5Fj6x2HJS7e
GBSFmlNMRjZuXK52xVK6mq0WzNFb8K3Zitc/TJvP1mLOKqqXlrVOPyPAxixwOx2S
FvvXdLrpdgo2PkJdKhmVOHg731mN1vK/OFbx+Og4TmFdQZ7lpJlZ8uJcbO0HkoWk
TROzCdrKixip6X1stcn61iuBHw1OFO/Rzvg/yK2LIgtjR0sGEtUpqtG6ZyDz/ZAf
Uhdz+gtewS7e5IaLlt5V8i4Ax2mugaHxaaFs6OY0KUO5wF5v2rNM/esIWMChLX7c
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137727477814317532023164842728462097281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go to https://www.thawte.com/repository/index.html'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL123 certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.simplicitycrm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26028806868819389557378563171082751182500011135237447239203431665736652006732250940855974629472169781522573051180518619477558531353355101668253390671315977630064485620411787386716591380294228370665153534430798403684120091338471286253381939314459305981006109899117876856726113730710765736206440241161720425125842367755073318164424027853000301315740394293603042877843901112971033130133202499764665357406922065253867987563627676708843511859270496847287295564983540859790400545717369638935027294096064962616912336260465523335965504072811030731136431637163972326865223877160668163772350202301303034735010072377187859619013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplicitycrm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab44e45dec83c7d9c0859ff7e1c69790b08c3f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-aia.thawte.com/ThawteDV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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