api-qa.globalcrossing.com

- Global Crossing Telecommunications Inc. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 57:dc:a4:8a:0c:77:6f:37:5c:3d:52:38:b4:00:b8:05 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Global Crossing Telecommunications Inc.

Organization: Global Crossing Telecommunications Inc.
Organization unit: IT
State / Province: New York
Locality: Rochester
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:dc:a4:8a:0c:77:6f:37:5c:3d:52:38:b4:00:b8:05
Serial Number (int): 116788478194684976357623402004786231301
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 5b:1f:ed:d6:af:09:9f:58:6a:df:2b:b0:99:87:d6:27:cb:f0:07:1c
Fingerprint (sha256): 7b:2b:4f:05:fb:29:39:20:25:d5:ef:39:af:e5:17:18:45:8a:bc:71:86:00:0c:89:66:c4:af:cc:54:0a:71:17

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate api-qa.globalcrossing.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-qa.globalcrossing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-qa.globalcrossing.com

Other certificates including the domain name globalcrossing.com

(limited to 100 certificates)
edge-ext.globalcrossing.com
zextsvcz.globalcrossing.com
enrollment.globalcrossing.com
uptime.globalcrossing.com
b2bqa.globalcrossing.com
b2bqa.globalcrossing.com
ecd.globalcrossing.com
lyncdiscoverinternal.globalcrossing.com
dialin-na.globalcrossing.com
extranet.globalcrossing.com
b2bdev.globalcrossing.com
dialin.globalcrossing.com
meet-na.globalcrossing.com
api-nvt.globalcrossing.com
tools.globalcrossing.com
api-dev.globalcrossing.com
ucommand.globalcrossing.com
api.globalcrossing.com
b2bp.globalcrossing.com
meet-na.globalcrossing.com
uptime.globalcrossing.com
owa2007.globalcrossing.com
xextsvcx.globalcrossing.com
desio.globalcrossing.com
b2bdev.globalcrossing.com
globalcrossing.com
activesync-roc.globalcrossing.com
owa-test.globalcrossing.com
b2buat.globalcrossing.com
cwa.globalcrossing.com
ecd.level3.com
myapps.globalcrossing.com
securityforms.globalcrossing.com
ucommand.globalcrossing.com
glbcap1.globalcrossing.com
webvpn.globalcrossing.com
apidev.globalcrossing.com
api-qa.globalcrossing.com
dialin.globalcrossing.com
meet.globalcrossing.com
api-dev.globalcrossing.com
uptime.globalcrossing.com
lyncdiscover.globalcrossing.com
api-sbe2.globalcrossing.com
uptime.globalcrossing.com
api-sb2.globalcrossing.com
owa2010.globalcrossing.com
owa2007.globalcrossing.com
desio.globalcrossing.com
globalcrossing.com
web-na.globalcrossing.com
glbcap1.globalcrossing.com
glbcwces.globalcrossing.com
glbcap1.globalcrossing.com
api-qa.globalcrossing.com
api-sb2.globalcrossing.com
ews.globalcrossing.com
ecd.globalcrossing.com
smtp.globalcrossing.com
share.globalcrossing.com
myapps.globalcrossing.com
activesync-test.globalcrossing.com
lyncdiscover.globalcrossing.com
owa2007.globalcrossing.com
YEXTSVCY.GLOBALCROSSING.COM
web-emea.globalcrossing.com
ucommand.globalcrossing.com
cu4web.globalcrossing.com
ap.beta.globalcrossing.com
owa2007.globalcrossing.com
b2b.globalcrossing.com
apidev.globalcrossing.com
owa2010.globalcrossing.com
glbcap1.globalcrossing.com
activesync2010.globalcrossing.com
cwa.globalcrossing.com
api-sb2.globalcrossing.com
apm.level3.com
api.globalcrossing.com
confsummary.globalcrossing.com
uptime.globalcrossing.com
owa.globalcrossing.com
xextsvcx.globalcrossing.com
api.globalcrossing.com
confsummary.globalcrossing.com
ecd.globalcrossing.com
enrollment.globalcrossing.com
glbcwces.globalcrossing.com
desio.globalcrossing.com
yextsvcy.globalcrossing.com
b2bdev.globalcrossing.com
b2b.globalcrossing.com
cwa.globalcrossing.com
share.globalcrossing.com
api-sbe2.globalcrossing.com
api-sb.globalcrossing.com
apidev.globalcrossing.com
enrollment.globalcrossing.com
b2bp.globalcrossing.com
apicert.globalcrossing.com

Certificate

The complete raw certificate details for api-qa.globalcrossing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X0hySPjFRU7fUGdii23
rosjnf85cVT0bJDNgkZ5tFmsgNsRekob2WNheAySRI1GIP8y3ewCBsCvphvcVQP0
EXT2AshVCk0LFUGIa0sDUX3vUMvykeMZ7ZoESNSe32B+WF6/RTDGv7UijPXSJwZX
+zirpGO0WoehoIXJbAUv8xoWutFXIY6ZvNP6FhC/XIvBz6aHgng4FHM/ubuDGY4t
rRJlibumCq5BCJDLfYJjdD0GrKbAXUgLgbxe+iWpMg/+vNTuMVwK1tqMDRD6kRBF
Mo6/f8TySWp221PhewomqVfp2vRDpK07ow/jxeN+N5IxRss1ah5YxEpztyhtAD31
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116788478194684976357623402004786231301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rochester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Global Crossing Telecommunications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'api-qa.globalcrossing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29980183153800666941841335713248078548926473544003973801208148031806074684624017661965943639840602507823120349870409866544527422551767857284200057239945390998319991124509111988728686909095598002756364378209774155735126278474292056043770634790937907155799111120055083657964898985406555538329876590632761271027054039181560068684425934268955764667399985028486538357294794409027429302818665333599933205653235387214968701535448620842986275452493007359967548959531497295946321556014343005552533028416227550625375100706874064177433350744233126353520264562455103347964933125588321252270609472195495860635001045387762382796043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-qa.globalcrossing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00047c0e2e29e7748b5ad20c7884c7735ad1b71a2a4403a0a4bb3b8ae25f5ceb7debd1654e6b790b80be10ad2abea3074dccf8d9b0f5d9a570363c655d253953311971877b86371daf3fd5940daae608d45f6442f65c6768e0bc08a1b746854ad63aa8dd84b8d919f968d3babd0f0ea31b7c15bdf629270faa74e6aa67228da3f4aaa40cba1f22875fadb9d77e332c18f179985080bbfb47ceb1c0a6112eec3b81eb376219b1f3ca48fc27bba10eb55faafe5231f7f65f8d945d3f173905505786ef18071042e8a67b5c111621a68019133b63213eb9dee32f08eb20a2f5f64a9f49590e11636f6d5efc07430d636299f402677ad009d5dd2e54f2028959e57ebe