click.email.icelandair.is

- SALESFORCE.COM, INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:a7:2a:69:e1:9b:8a:5b:14:72:46:c8:7f:f0:04:0a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
Organization unit: Icelandair Digital Labs
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a7:2a:69:e1:9b:8a:5b:14:72:46:c8:7f:f0:04:0a
Serial Number (int): 8843341800067392897845260914151916554
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:db:85:f2:ca:f3:8a:7b:e3:6b:c6:9e:6d:c3:3d:b2:1f:c6:69:97
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c6:95:89:86:e9:c4:16:db:22:d1:59:ec:df:15:5f:a7:89:b3:3a:55
Fingerprint (sha256): 84:02:50:ba:a3:c8:1e:7e:9e:39:9d:9c:b4:32:eb:e2:30:b6:29:ff:30:a6:06:d1:51:62:84:27:6d:3d:5f:55

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate click.email.icelandair.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for click.email.icelandair.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

click.email.icelandair.is

Other certificates including the domain name icelandair.is

(limited to 100 certificates)
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
*.icelandair.is
webmail.icelandairgroup.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
lyncweb.icelandair.is
www.icelandair.ca
careers.icelandair.is
icelandair.is
*.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
book.icelandair.is
m.ca.icelandair.com
icelandair.is
icelandair.is
pmpinternal.icelandair.is
m.icelandair.is
m.ca.icelandair.com
click.email.icelandair.is
yana-acceptance-client-placeholder.volantio.com
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
akamai-san25.exacttarget.com
*.icelandair.is
book.icelandair.is
*.icelandair.is
yana-acceptance-client-placeholder.volantio.com
view.email.icelandair.is
www.icelandair.ca
akamai-san25.exacttarget.com
click.email.icelandair.is
packages.icelandair.is
brand.icelandair.is
m.icelandair.is
view.email.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
*.icelandair.is
icelandair.is
*.icelandair.is
www.icelandair.ca
lyncweb.icelandair.is
m.icelandair.ca
webmail.icelandairgroup.is
icelandair.ca
icelandair.is
book.icelandair.is
yana-acceptance-client-placeholder.volantio.com
book.icelandair.is
icelandair.ca
*.icelandair.is
careers.icelandair.is
yana-acceptance-client-placeholder.volantio.com
webmail.icelandairgroup.is
icelandair.is
*.icelandair.is
bc.icelandair.is
www.icelandair.ca
*.icelandair.is
brand.icelandair.is
lyncweb.icelandair.is
akamai-san25.exacttarget.com
webmail.icelandairgroup.is
pmpinternal.icelandair.is
*.icelandair.is
yana-acceptance-client-placeholder.volantio.com
www.icelandair.ca
www.icelandair.ca
akamai-san25.exacttarget.com
click.email.icelandair.is
book.icelandair.is
*.icelandair.is
sip.icelandair.is
*.icelandair.is
brand.icelandair.is
icelandair.is
yana-acceptance-client-placeholder.volantio.com
m.icelandair.ca
icelandair.is
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.is
www.icelandair.ca

Certificate

The complete raw certificate details for click.email.icelandair.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww16MtV61WyFeL0YeSbQ
B2+xzpKyot6XTGXsuna+56BU9fvVBfEGvW6lEnfdzdNoIuXCRJHIV7OMjkDsg6Wc
W8nNL/2Hwau4lKZ5TE0Iu0oWNDkkQgVp1H6iEuPzmSe9sIxKFnvXiGb4CnbOtpxA
VYOSLNqEiGcpFfYzVppBrXaryRSM6wjLMuNBbvngBBXVCJt/P1nDB9iWC9neLVi7
IYB6+yV4A2t9HJuAccNXIBuUjpDpyJG3blJOXhhR0O898tt+BvE0CIpk837bWBhi
SHfhB/RXINJpEtpNrfo7rvtrNmxLgKyZXswe9FwUHdZ3LGZByLI6Qc/igRRAG6O2
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8843341800067392897845260914151916554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair Digital Labs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'click.email.icelandair.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24623115391526969527514446535212306877721148433179243430186930830128275857946361792650103361787191351927263416025690886281789037098560804091779293661352043036546866705785211797350278113099814703838028030498538238042205598862738941660621285469962771947945796621867605848927276083858891329894952224493817130975779700177129474603894201092941485164646888246171890326494832604673914560573238474508398689124277161756521262006938485117206567741287868471407142791001844628407023267375269903753306657796436525081338024201348907744543342628602331278329503236872946830500597357478977573053528481744499726640686734512757867263583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83db85f2caf38a7be36bc69e6dc33db21fc66997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.email.icelandair.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096f442f551311bfa6abcdd2570d55afbaf94803c4626d455d2ae577ec986f44a71b9cc1c6f99eb061b64bcb24f0de80c25e18057e36e998380d63c01451a77d85a2cd59024c5916adf2a8e612c23fd05a6e5ed08e4b5743ba21de092cd01db7bd9d72107636903c6421ab185da739675eb37d96e39fa68e31d5af3bec3c16ae3502b6fd7a75043c390353e8048247f764792981b317c51a27e3273a9c08f0871f91a69c416bd24c679c1e93a05261fe9ef82689b9bfb1ce47c398e06f5552fca2e465e651905013f05b534d8829fe8c32ef09ef6dac1c34d84f4f64d52c2aa962f876ba4544ce04b3b0bd7c2db8d792bb35b336df18d904ae967ad836fb594ce