cowbell.shopperarmy.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 29:15:99:d6:94:7b:85:a2:81:27:ee:48 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cowbell.shopperarmy.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:15:99:d6:94:7b:85:a2:81:27:ee:48
Serial Number (int): 12714999325261458132693413448
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 18:13:f5:5f:54:e3:17:94:3a:4d:a0:d5:03:83:8e:1d:d2:c0:aa:10
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): ac:23:ce:9d:49:11:cd:f5:48:40:df:c3:6a:0c:50:9b:51:05:a2:56
Fingerprint (sha256): 5f:a0:5f:de:1a:c6:72:71:a1:b7:03:d9:c5:98:29:4d:dd:5a:84:ba:8f:98:6e:05:56:65:74:8c:c8:83:1e:56

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate cowbell.shopperarmy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cowbell.shopperarmy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cowbell.shopperarmy.com

Other certificates including the domain name shopperarmy.com

(limited to 100 certificates)
tls.automattic.com
www.app.shopperarmy.com
corp.shopperarmy.com
www.app.shopperarmy.com
www.expertdataconsulting.com
brands.shopperarmy.com
brands.shopperarmy.com
www.shopperarmy.com
www.shopperarmy.com
www.brands.shopperarmy.com
corp.shopperarmy.com
na2.beolab.us
brands.shopperarmy.com
www.corp.shopperarmy.com
app.shopperarmy.com
shopperarmy.com
www.shopperarmy.com
app.shopperarmy.com
www.brands.shopperarmy.com
auth.shopperarmy.com
brands.shopperarmy.com
tls.automattic.com
www.tamostudy.com
www.shopperarmy.com
app.shopperarmy.com
corp.shopperarmy.com
corp.shopperarmy.com
corp.shopperarmy.com
www.app.shopperarmy.com
www.app.shopperarmy.com
app.shopperarmy.com
shopperarmy.com
corp.shopperarmy.com
www.shopperarmy.com
www.shopperarmy.com
corp.shopperarmy.com
www.shopperarmy.com
corp.shopperarmy.com
brands.shopperarmy.com
corp.shopperarmy.com
corp.shopperarmy.com
shopperarmy.com
corp.shopperarmy.com
ketogeniczna.com
cowbell.shopperarmy.com
tls.automattic.com
app.shopperarmy.com
tls.automattic.com
www.shopperarmy.com
www.app.shopperarmy.com
brands.shopperarmy.com
www.shopperarmy.com
juns.dev
corp.shopperarmy.com
corp.shopperarmy.com
corp.shopperarmy.com
brands.shopperarmy.com
shopperarmy.com
corp.shopperarmy.com
corp.shopperarmy.com
www.shopperarmy.com
tls.automattic.com
tls.automattic.com
brands.shopperarmy.com
brands.shopperarmy.com
www.app.shopperarmy.com
tls.automattic.com
tls.automattic.com
brands.shopperarmy.com
app.rewwind.co
app.shopperarmy.com
shopperarmy.com
tls.automattic.com
app.shopperarmy.com
app.shopperarmy.com
corp.shopperarmy.com
app.shopperarmy.com
shopperarmy.com
www.shopperarmy.com
www.shopperarmy.com
www.shopperarmy.com
shopperarmy.com
tls.automattic.com
tls.automattic.com
www.app.shopperarmy.com
shopperarmy.com
www.app.shopperarmy.com
shopperarmy.com
corp.shopperarmy.com
brands.shopperarmy.com
www.app.shopperarmy.com
www.app.shopperarmy.com
www.shopperarmy.com
app.shopperarmy.com
www.shopperarmy.com
corp.shopperarmy.com
brands.shopperarmy.com
www.app.shopperarmy.com
shopperarmy.com
tls.automattic.com

Certificate

The complete raw certificate details for cowbell.shopperarmy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2khP6GjE1A6FMFTkZzRJ
P0sQx4aRtrrFb9dspemRIogs+ovYVUIO3gO1tjkqa/vAUdnSOTIZmb2igpnXpKTa
UnjXiE58ltOe7ISSNabLVQmeNjXWPxnErC9en/UhS9L+rp/S57KtG7tCrIS2lv4J
DxhxanlGoF2kyqoF7Ky1WVm4TwXszY9fTznO4zpKnqdseKNLHPHQDGCxanDHAGWI
eNJ86jg8dQ43ubDmHSO7fJgtbZ/jsDhSgkMZsDamfI1XlcJJfi64SNHconysYbGs
cszwajKtFKGJ6TpCUrBNORtwW4cvxk7pQj4jt7wIvwQiAIiqBP9oEskH79suw5IL
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12714999325261458132693413448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 16:27:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 16:27:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cowbell.shopperarmy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27555608927859888253359567983205270843897586015634228679613899525899218198788415290774208515729180144029426337082975257366192304945361818096924642914249082435073235879288016303161762795525529122766625848476488268926129476041596680840198177743254215495893661759280678834843435432139540488732639977454775783310448571715641645961298253070464815015919003114477176222645207069470825551193357057999386002811316299188626208859386514364020642915569204554295716982619460450841897477370130944669731671534522384191733684344506540572289723134523405169978877908591916945151885000033720498569296925801735623034714609180677231479647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowbell.shopperarmy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1813f55f54e317943a4da0d503838e1dd2c0aa10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015fb634d2670000040300473045022100f827d62787edf33e7156d139e27672b76f282952b1b154ab21ff399dd51b8a18022070c7de62b7db98bc23590a7cb239afa40bd9b93274daa0f930f283052ac6f6990077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015fb634d2c20000040300483046022100e8fd5d624aac3a461ec0636ed0a9b320936e8a09ee364e8e2f1c9eeaad403490022100eab4cf50206b6e1d50b794f291020c176dc59d1a3304ac596054e1671a321b92007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015fb634d6000000040300473045022100d1e4e62662b5d340fa9ad77b54df80741b09e41a60962bb7cb730d07a6460e1402202c4241d2a9203b324107466124549da62a6ec1aaa4cdfdff682bad2cee836bce007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015fb634d5490000040300473045022100b29a30a3ea941bc7beda00f24eda58ce44b6e0635749b4ab8dfcc1af2ccadc4902202d56acfda8577a6d7e26625afa5f1092b2a64a07b4bc8594b9aa75b027b50f4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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