OV SSL/TLS Certificate for crm.salesforce-qa.afirmeprod.myshn.net Issued to Skyhigh Security

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign RSA OV SSL CA 2018)

About the crm.salesforce-qa.afirmeprod.myshn.net OV SSL/TLS Certificate

This certificate with serial number 61:1a:60:c1:75:0f:94:25:1f:18:7c:bd for crm.salesforce-qa.afirmeprod.myshn.net was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for crm.salesforce-qa.afirmeprod.myshn.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 61:1a:60:c1:75:0f:94:25:1f:18:7c:bd
Serial Number (int): 30051934939819537250974727357
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: 8d:4c:8e:df:66:96:12:0e:b9:31:af:ad:60:93:17:2d:be:b6:b1:6d
Authority Key Identifier: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (SHA-1): 69:eb:8b:d1:56:3f:70:fe:48:d6:5f:58:51:68:7e:56:fa:26:de:81
Fingerprint (SHA-256): bb:a2:e2:56:91:a8:a9:f4:2c:bb:3b:72:c2:ed:50:df:70:66:3b:73:39:86:64:03:c6:f5:a8:e8:03:79:b9:f9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate crm.salesforce-qa.afirmeprod.myshn.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for crm.salesforce-qa.afirmeprod.myshn.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for crm.salesforce-qa.afirmeprod.myshn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSACy50qawC0rmIeEP4s
FpHuiu54/mMxoJ1jEXXgQ/yYZjoteSBQKGaoqnAHF4m3boQPMaaaj3cTTkr9u9Ki
2XZ50ZSAX9R5yLu3XEjpaWj5UnELy85cx7hZlc+Z/QYenRXpGN3V7TMRP1Fiwo5E
qvqfP2rLMOOtMDxvoQAW+H0L7OErCvavusjkxdI6YU3jL7oCRmTVPxzVxa3aMYCr
fuqNPGM15W3CqyYJ5VXPS/FwSw/lFKIb4ANLTPhLV+x6+FLvQisGBFha8XA/bkuZ
Uf0SByZ1eA26Z0Emgb0qPIfJAXqtYuGmn7rpGnVDUgjdPhShA8mt6VqOdPY+3Gv9
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30051934939819537250974727357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 22:51:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-22 22:51:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skyhigh Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20340152272213999594665261270280486268573641559842242638763034393202144078187388079880711921332694300901670605176625978344396628645125628910414303448656421691159841984753858227208644970120504458212656514850163950905793677083083867015047172272697200871056415441039889410127742282407712043553963955590868663533435844760623728548512030083001180146631456525947492893372365566650530455238503097768182957863136784367666867586431862950814770504724460858539133417387796326736586045966821208420024347228211522428152901550648091745429944612417957854449012667510403784729755487638647773612230973291150623768159999610458796195153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesforce-qa.afirmeprod.myshn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d4c8edf6696120eb931afad6093172dbeb6b16d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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