*.borderless360.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 37:a1:0a:31:53:c4:55:07:a2:31:01:96:eb:86:f1:6d was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.borderless360.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 37:a1:0a:31:53:c4:55:07:a2:31:01:96:eb:86:f1:6d
Serial Number (int): 73943706294595086791341064494510436717
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9b:00:83:01:39:0c:04:1a:32:57:6f:cf:85:de:20:7a:55:27:f1:e2
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): d9:01:37:8e:79:56:65:48:94:5c:18:7f:05:e5:48:c1:1d:ac:64:f7
Fingerprint (sha256): d3:0d:94:9f:d6:fb:2e:0c:69:dc:30:29:f0:b5:84:e4:76:fc:25:fe:74:3e:73:fe:b3:13:5e:70:bd:ac:9d:49

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.borderless360.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.borderless360.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.borderless360.com
borderless360.com

Other certificates including the domain name borderless360.com

(limited to 100 certificates)
admin.borderless360.com
status.alkemics.com
status.alkemics.com
admin.borderless360.com
status.acorpcomputers.com.au
*.borderless360.com
status.acorpcomputers.com.au
borderless360.com
status.acorpcomputers.com.au
it-status.lbl.gov
status.alkemics.com
status.alkemics.com
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
borderless360.com
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
it-status.lbl.gov
it-status.lbl.gov
status.alkemics.com
it-status.lbl.gov
*.borderless360.com
it-status.lbl.gov
status.acorpcomputers.com.au
it-status.lbl.gov
status.alkemics.com
status.alkemics.com
status.acorpcomputers.com.au
it-status.lbl.gov
status.acorpcomputers.com.au
status.alkemics.com
status.acorpcomputers.com.au
status.acorpcomputers.com.au
it-status.lbl.gov
admin.borderless360.com
status.acorpcomputers.com.au
it-status.lbl.gov
*.borderless360.com
*.borderless360.com
status.acorpcomputers.com.au
it-status.lbl.gov
status.alkemics.com
admin.borderless360.com
*.borderless360.com
admin.borderless360.com
admin.borderless360.com
status.acorpcomputers.com.au
admin.borderless360.com
status.alkemics.com
it-status.lbl.gov
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
app.borderless360.com
status.borderless360.com
status.borderless360.com
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.borderless360.com
admin.borderless360.com
status.acorpcomputers.com.au
it-status.lbl.gov
status.alkemics.com
proposals.borderless360.com
kb.borderless360.com
status.alkemics.com
status.acorpcomputers.com.au
borderless360.com
it-status.lbl.gov
admin.borderless360.com
*.borderless360.com
it-status.lbl.gov
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.alkemics.com
status.acorpcomputers.com.au
it-status.lbl.gov
status.acorpcomputers.com.au
status.acorpcomputers.com.au
status.borderless360.com
it-status.lbl.gov
status.acorpcomputers.com.au
admin.borderless360.com

Certificate

The complete raw certificate details for *.borderless360.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa383AGnvr+I2EsmxBMW
WcMJvP4rHvByFB7fJQv99o3qOgsE9ms/TDv9x8vy/J/6wrc7fhEzSFPSoYy1kCIf
yYjbruhZ1zhB3OCr5EYGr8PwIVuUhhpArN31QovaNs18nDsgrCB4hzLrvti638gu
zIwljYqK2C6zsYSZCRpmlPzLXuTAgMFi5Fw26AwbmRIIuomfDVr1EzC4a0ziqBV6
5eYuaF9w/+hw+78UbMeVgPDUA1hQ+33DyUf2zLwUTLGcWZN7AJ70i7BSD5qdfobN
zWaL4FsBkLlnsE1A/kmwx0aqcVAWA5DnI4wvLZURlD4VRORsI5MFmmJf9TqQKZ1E
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73943706294595086791341064494510436717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 06:03:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-08 06:03:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.borderless360.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22429976527338628650438112787634365222259625243102589220582182964933627081676470940620716785600224451314873089747729927068882264797860718960458971713525546436547767242794400614277862500992360769040136948688882724458783574473563292646771848630277804411341086677751265495137552737689264149685026024939572407954773029678277328003839379272380332905767534231025782595487199080270916207383887169235063888012328978146007819207445539758678950935885099664199626522481281933095731137640995386105949909370391839314391475201934710383614312093474555708078732812297995963156379986881475328147131937834523243119765251248638304011371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borderless360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borderless360.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b008301390c041a32576fcf85de207a5527f1e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00250ed680132d5776ee83e9d4cf96efc51dfd2a07a837ffaf6857bc3caedf58ada1c21d074de43152a61e9598e6fe3ffa2808f2ef41d079c1d779c6bc73395acc5ff62056b51ca2c13acb806f7a9d55dfa41d9ec1fcb22b9215a598aea8eed43cc0cba206659ca9987d50837bcad14dcf9da37a51c29d2f219339982b7703a1f65dc50fe7bb149493239c4a82c67f370879b017f371037d4b1f9c8ea1d603050986c42c9aeb170891e7fbd4181c50b8b7d8f28fbe0906aafb780a0866ed32899630f56369e2595abef3db3d18a08cdbc2e7bdf543a57fb244eb9cd704ba890245b9705655636fcd8f1620703b3885fd6933aab908cc67d9b66caf42bb50c906d7ed5f5cf4119a6a2730d878b9be9e488fc199f356bb789dc9e3c63dee9d19708d4f13fed3438e17f1372aae4575f9c5e7f6cae4ace32e7db840af15f48695c647779c0a9fb194f92559e62f92a4e83498ebe822718346dae51fa58ddbabb6b176334a212361b89585d0c9433059a4f7094ee32698e6c0254a6fc3cf8b7d864ec2028d95020f5fae34ebfbc2d638240c5e73c603d65d535bf12a000b9936e87b381a11adc12dfe63e41fc9a8dad7511608ddd99bb9add3a92c0d81b6bd8afca8661d50c597d5f33a1b81d8eb98184287865302ff578daf89afb0fd8d4dd880bff87a246f305bb44c4354be3752747341486e9abeb91aba64212447c4829a0cf314