secure.echosignstage.com

- Adobe Systems Incorporated -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:3e:ca:b2:1e:48:01:45:56:1a:c1:3b:d1:16:59:ee:6f was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Adobe Systems Incorporated

Organization: Adobe Systems Incorporated
State / Province: California
Locality: San Jose
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:3e:ca:b2:1e:48:01:45:56:1a:c1:3b:d1:16:59:ee:6f
Serial Number (int): 1492221643540687289888688510032523139083887
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: d2:11:ab:36:db:56:23:1d:40:b5:d3:0b:06:7b:19:b2:6b:48:f5:16
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 86:91:79:cd:b1:50:62:91:6c:dc:9f:73:e8:fe:6b:17:12:cf:aa:9a
Fingerprint (sha256): 61:42:49:07:4d:cc:75:25:a7:5b:36:92:a7:9e:18:92:e0:1c:5c:ac:9e:7f:66:ab:61:47:28:3f:74:da:cc:12

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate secure.echosignstage.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.echosignstage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.echosignstage.com
echosignstage.com
*.echosignstage.com
*.echosignforsalesforcestage.com
*.echocdnstage.com

Other certificates including the domain name echosignstage.com

(limited to 100 certificates)
*.utility.echosignstage.com
ssl.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
ssl.adobe.com
ssl.adobe.com
ssl.adobe.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
secure.echosignstage.com
ssl.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
ssl.adobe.com
ssl.adobe.com
ssl.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
assets-cdn.adobe.com
secure.echosignstage.com
ssl.adobe.com
static.adobesigncdnstage.com
intra-node.micro.echosignstage.com
secure.echosignstage.com
secure.echosignstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
secure.echosignstage.com
secure.echosignstage.com
ssl.adobe.com
ssl.adobe.com
secure.echosignstage.com
ssl.adobe.com
secure.echosignstage.com
secure.echosignstage.com
static.adobesigncdnstage.com
secure.echosignstage.com
ssl.adobe.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
ssl.adobe.com
*.utility.echosignstage.com
assets-cdn.adobe.com
ssl.adobe.com
ssl.adobe.com
assets-cdn.stage.adobe.com
secure.echosignstage.com
assets-cdn.stage.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
assets-cdn.adobe.com
secure.echosignstage.com
static.adobesigncdnstage.com
secure.echosignstage.com
utility.echosignstage.com
ssl.adobe.com
static.adobesigncdnstage.com
ssl.adobe.com
assets-cdn.adobe.com
*.utility.echosignstage.com
assets-cdn.adobe.com
ssl.adobe.com
assets-cdn.adobe.com
static.adobesigncdnstage.com
assets-cdn.stage.adobe.com
micro.echosignstage.com
intra-node.micro.echosignstage.com
ssl.adobe.com
assets-cdn.adobe.com
assets-cdn.stage.adobe.com
ssl.adobe.com
io.echosignstage.com
static.adobesigncdnstage.com
ssl.adobe.com
secure.echosignstage.com
ssl.adobe.com
secure.echosignstage.com
micro.echosignstage.com
secure.echosignstage.com
assets-cdn.adobe.com

Certificate

The complete raw certificate details for secure.echosignstage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMDbk6rua/JZ0PfQvVmV
PvOqPwcXDV/BWxaf3nStYOPDBVow9Si6KHAzUpMuXvbK/ELrzBvq+M95X/s+qd2n
onThGq3Pmu8PunEUkTn8uhHsq6Ldfe90TISzAwMqVUBZ2EqRaV0CdB208wey7xT4
R1/5FOfaflU3hx5rJTZo7g846VCFS4qrkLccxa6XBHSoAYZn8qg/RcF0Oo8KHBuq
qUsZkeyB0p6dUFHo+5k5V+EJDQUxREIEaoiFt3zKCFqiI973IkqIVbOQm8iZ8oH8
4UhkdJ5v4LOITip+nrBcdND8jcZzxRJ9tr67uIZowEOH+mvZPqKQMjWuQ/Xh6xSy
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492221643540687289888688510032523139083887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-12 18:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-13 18:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adobe Systems Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.echosignstage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21808090141358987949864830669415849557710049647335668042021851396887250457124938000103490874257202270209438803583622416386840782089433347233009072081655586435403281222845862932261157874552931010783117805994367954446589583490983134068637381644323910821584919279563337224280647821733066752354499539374193335883265651533678674043980685579813814508271889108177737284997594267390052173692849132580163355079489095174306469386314179613179407255817112324090254977770306281759936495554085303473511865901481075152942730327810899843285723950069756337375291535297866834794670242696961230573473641603523219436365730114374039024219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echosignstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echosignforsalesforcestage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echocdnstage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d211ab36db56231d40b5d30b067b19b26b48f516
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab7d98dc7e66413c874cd5716e50dbae502d9c8f2f95af8fcf5d7f9c8fa744475336961df1cb0de9863afec294d9f5123c3586d0f2e304205f7dfb6d46a0aeac31be9ba0e30a708948403410fb43ec66c5b8e95acd540ea954744ebafa7c0e20f296969a656f37b4bb557009e3cd1bdbe039687cc4b719dabf4d25dc9552fddfb8eeb411ebfe23854ec4d5576fbea64c37525df63e3213e79ffbd22ab1e3bac7f89d54b4c8a84bd48bf81c418bb5e0081dec3b3a5e3268f637e950025662b6a550bbdb3c362aa535def7d50d0ca652d86423ceecc4a670a34cd505df06c8df8ec3160cfceaf7c274159a41340d0e13ab26f869ea80f72a7d9392ab02e5d964d6