www.bobswift.appfire.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 60:39:5b:de:87:ee:e1:40:91:e6:1e:ca was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bobswift.appfire.com,OU=Domain Control Validated by OneClickSSL,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:39:5b:de:87:ee:e1:40:91:e6:1e:ca
Serial Number (int): 29779903554889299868791480010
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f1:d5:c2:21:6e:c2:d8:cd:03:f9:7c:3a:9f:d1:67:4a:f7:26:54:fc
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 31:e1:48:f3:5a:c0:0d:9b:be:0a:93:e6:27:71:7a:94:37:40:a2:a5
Fingerprint (sha256): 6b:86:02:de:f9:3c:45:e2:44:a7:9d:69:54:8f:4f:85:8e:a6:a5:25:7b:a0:24:06:aa:26:15:2b:ee:4c:97:9b

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.bobswift.appfire.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bobswift.appfire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bobswift.appfire.com

Other certificates including the domain name appfire.com

(limited to 100 certificates)
feedthree.appfire.com
*.appfire.com
testslac.t.appfire.com
birdergame.com
www.appfire.com
brand.appfire.com
services.appfire.com
support.cbont.com
promo.appfire.com
appfire.com
training.appfire.com
okr-jira-prod.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
services.appfire.com
testdac.t.appfire.com
*.appfire.com
okr-jira-prod.appfire.com
www.bobswift.appfire.com
testdac.t.appfire.com
training.appfire.com
appfire.com
testjac2.t.appfire.com
training.appfire.com
*.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
*.appfire.com
x.loplat.com
promo.appfire.com
www.bobswift.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
san-22-s12.tlsprovisioning.exacttarget.com
*.appfire.com
appfire.com
cms.stage.brand.appfire.com
www.feedthree.appfire.com
*.appfire.com
*.appfire.com
*.appfire.com
testdac2.t.appfire.com
store.appfire.com
akshaysoam.com
appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
san-22-s12.tlsprovisioning.exacttarget.com
promo.appfire.com
www.walkietalkie.live
appfire.com
services.appfire.com
services.appfire.com
www.bobswift.appfire.com
training.appfire.com
www.bobswift.appfire.com
services.appfire.com
www.bobswift.appfire.com
juridisch.facet-adviseurs.nl
services.appfire.com
services.appfire.com
services.appfire.com
qa.flex.htown.io
testdac2.t.appfire.com
www.bobswift.appfire.com
training.appfire.com
jira-google-calendar.appfire.com
appfiretestbucket.t.appfire.com
testslac.t.appfire.com
services.appfire.com
www.bobswift.appfire.com
training.appfire.com
cms.stage.brand.appfire.com
www.bobswift.appfire.com
www.bobswift.appfire.com
www.feedthree.appfire.com
wallet.xanpool.com
feedthree.appfire.com
appfire.com
help.provirtualhelpdesk.com
pankaj.appfire.com
appfire.com
jira-google-calendar.appfire.com
beheer-test.toegang.org
drwiki.appfire.com
cms.stage.brand.appfire.com
promo.appfire.com
services.appfire.com
appfire.com
www.pankaj.appfire.com
promo.appfire.com
san-22-s12.tlsprovisioning.exacttarget.com
promo.appfire.com
app.konquer.club
www.feedthree.appfire.com
cms.stage.brand.appfire.com
bobswift.appfire.com
testbamboo.t.appfire.com
appfire.com
appfire.com
www.feedthree.appfire.com
services.appfire.com
training.appfire.com
xn--pei.gg

Certificate

The complete raw certificate details for www.bobswift.appfire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnJZfOBltsvmzdjyTWKZ
yCseXj5wXKS9h05Bd4825FbNgd1s49p/dIMjpTby0kG1vlX010SRYZKGQnIS5pzd
bgco2opIkxplYy/WcKkGGeC/AKn/F9pbwGn0V95vVsaWElLbGH+EmwNEsBMWWLO3
lwliBDamQxqfIPB/A3pEUFnOiHsb0ZM1/NzRy64kbblhU3pVSZ8wMQ63wCps2dSd
UeaHRnEVELhkZwexc1Rv8cxSKeBiflXzvhdpwSg09nIzTG+f8ERaSIzYHtQnz/W+
eM0baTjIli/vdANtcrlswV0jJQPlmUA8P8cJIMk55DAu81e3TaFRegjzhAea+Ot5
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29779903554889299868791480010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 08:13:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 08:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bobswift.appfire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16972320735938218901945051140963147754877493569421733031936945784759990898319566530270859088458135849057035272423609821763569145223569049705482806093298659518234869285963226973324328679568092312491156659698398893279048406205228154089988344874324029281916912446407893439923737432570667444715370119424759742889123588846967336620408290626033073556242046829263350045961754988407924522181416751833428932789261548504440927702867050856773420542380831721194114280259069475859811006361832721124411583467821981535098360826800439221694726743692672888221580641079317601528905531314404304592608317174518820094457186247643727886769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobswift.appfire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1d5c2216ec2d8cd03f97c3a9fd1674af72654fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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