www.colourground.nl

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 17:ea:37:c8:5b:84:f2:8f:09:3b:25:80 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.colourground.nl,OU=Domain Control Validated,C=NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:ea:37:c8:5b:84:f2:8f:09:3b:25:80
Serial Number (int): 7401307293780794830474651008
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e8:ed:d4:06:61:73:0f:23:12:d6:07:12:b8:44:0d:66:b8:ca:c1:a0
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 69:62:a3:cb:69:dd:5c:d1:37:4a:70:f2:c0:ac:38:ca:d4:e3:97:f2
Fingerprint (sha256): 00:01:1b:f9:78:9e:08:54:4b:e3:8c:64:21:fe:42:4e:c5:2f:ba:41:d2:4b:c0:19:d4:8c:eb:25:d1:1f:4c:12

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.colourground.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colourground.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colourground.nl
colourground.nl

Other certificates including the domain name colourground.nl

(limited to 100 certificates)
www.colourground.nl
www.colourground.nl
www.colourground.nl
www.colourground.nl
www.colourground.nl
www.colourground.nl
www.colourground.nl

Certificate

The complete raw certificate details for www.colourground.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Q4eqq1Yi5vxsTottha
XJ0aFIG6f2fqFpcdoxwvAQm965rH6WTbfWVrcBqAwncGEziHs/rgBuy55EW38l3h
huuZIksdt8RFiYw7bkyE3P0PwpCZ/ViGKfZxajLjBvZ+HFz1+S3mBo5+qAL4C08d
dCJlnhmI3h9VfF+zgIQ7f2q/SZCDTHSoMtsHdnd2oldjWfbNKFuITFf0fdiYAIpb
GIUbdyWCYUOssAKtnRIh64pVKlP6yFbF9AotJ4E0lINQ/XY9XQ2fBmybqJX/yAmj
pqohrnF2zvDExfB8s1bE6DTtP9XX0+2990HLup3WmEQVMzqb0tbUcGgSA4DuXkFw
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7401307293780794830474651008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 12:56:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 07:06:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colourground.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26172859864429467114209797625540588458244063672761744472628431572232315758153425333372082798027041837318621060032048856509857123833383120803204928798590941528677657033456263399895600878585865439628912794300075788702003543534496573920974996452124180268652056970128714387844208896582842939608107442451952878108075331307791208134876709655860925472592760232239683739138081237557241886495100626842606402044360157584436744036618926227974420551546285534538917099076471886274722730696298676047711188055081543269124592710901664360983117951846311532516104102196956313488831209966457977189875256782923379928439868190246813397197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colourground.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colourground.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8edd40661730f2312d60712b8440d66b8cac1a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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