*.forwardair.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:4f:fa:1c:55:67:f2:ca:d4:4a:92:5f:2c:74:f8:2c was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.forwardair.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:fa:1c:55:67:f2:ca:d4:4a:92:5f:2c:74:f8:2c
Serial Number (int): 5732176282185269939739571895036868652
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d0:59:a7:c5:70:64:ba:8d:76:99:e7:34:97:89:41:36:86:ec:f3:4e
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 9c:56:c2:cb:64:24:05:5f:dc:38:84:ff:1e:40:a3:5d:c2:aa:65:e5
Fingerprint (sha256): 83:c5:28:89:74:21:81:95:11:aa:7f:34:7f:33:5b:7c:e2:ef:eb:21:4a:09:bc:2a:64:66:a9:aa:91:55:07:00

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.forwardair.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.forwardair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.forwardair.com
forwardair.com

Other certificates including the domain name forwardair.com

(limited to 100 certificates)
image.em.forwardair.com
sshr.forwardair.com
www.forwardair.com
san-5-s12.tlsprovisioning.exacttarget.com
www.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
*.forwardair.com
vpn.forwardair.com
*.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
vpn.forwardair.com
san-5-s12.tlsprovisioning.exacttarget.com
www.forwardair.com
san-5-s12.tlsprovisioning.exacttarget.com
awmdm.forwardair.com
image.em.forwardair.com
*.forwardair.com
vpn.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
contact.forwardair.com
www.forwardair.com
mailex.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
image.em.forwardair.com
traveler.forwardair.com
image.em.forwardair.com
*.forwardair.com
image.em.forwardair.com
san-5-s12.tlsprovisioning.exacttarget.com
image.em.forwardair.com
san-5-s12.tlsprovisioning.exacttarget.com
m.forwardair.com
image.em.forwardair.com
www.forwardair.com
*.forwardair.com

Certificate

The complete raw certificate details for *.forwardair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMIIdIXZNRmQWkzdmf7O
w9RqCIhWlJ/o64+SNC00eTXYIlAdbqxd2aIBzmNIdMmKiVQHAlTfb3Bx25gP1Fby
QZ14QShNGjSZ40fJEOeWXv0jwaCNqPVdmBV6NXL9La0/mp+VQ6iXa5dUvHk9OMQd
ZYVjab7FL/L/Y+SVW7tq6eWjFyV/leYBBRmbv5DVwM3he0QQRIBGOqiXF7Ce052R
L1T3iySCK9CPjlSAKeJGbFfo6oin51h3uJ11VRsfvK81fCg+URwAsQgukBJKYJW8
9Y8rwr72qWSoaUNGCEHuElBdzjZzaL6dIVm/7BRKl9CzHDTMKQTV3xlqrxyiKdLJ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5732176282185269939739571895036868652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.forwardair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20798763266628297318547389184613565047499665783138512167498576533653765423864788183756743227211786118856107213189907920876569346315697580055444441339482246744228993458699808899108187425126319271325605914744748127003287403502978252975364533558976403510117186898396461190892815103942802609165751263049131596659428066742177224693776851329703137216822659168058846896401411106515558205158318013531870140297928503143411876806209953931904612257801436196445290478625233221719565173688794738675829639512492056248812263588374400699938082623717081130097828962431010678682304171044655761530832773316388375509013082480240812542361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d059a7c57064ba8d7699e7349789413686ecf34e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forwardair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwardair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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