meeting.rsyd.dk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 54:a8:99:2e:31:1c:82:c9:a6:68:c1:9b was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

meeting.rsyd.dk

Organization unit: Domain Control Validated
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:a8:99:2e:31:1c:82:c9:a6:68:c1:9b
Serial Number (int): 26200563736849197130387603867
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 63:31:da:82:3a:fd:7b:90:43:d8:0d:3d:d8:1c:a4:e7:ef:b1:0f:82
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): b5:a0:48:d2:e7:97:a4:1f:00:c3:00:e2:c5:85:96:5f:e3:23:a4:92
Fingerprint (sha256): 00:01:9a:9e:50:d3:9d:e5:95:6b:4a:ee:cc:11:75:45:63:a6:2f:2b:5b:8a:9c:b4:0a:cb:cf:d3:4f:1f:ee:80

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate meeting.rsyd.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meeting.rsyd.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meeting.rsyd.dk

Other certificates including the domain name rsyd.dk

(limited to 100 certificates)
meeting.rsyd.dk
mammo.rsyd.dk
fs.rsyd.dk
vpn.rsyd.dk
expe02.video.rsyd.dk
orbit.rsyd.dk
srvodevidexpe02.rsyd.dk
open.rsyd.dk
*.rsyd.dk
fs-udd.rsyd.dk
mammo.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
JGEXPE.video.rsyd.dk
expe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
intra.reg.rsyd.dk
intra.reg.rsyd.dk
praksis.rsyd.dk
ddl.rsyd.dk
EXPE.video.rsyd.dk
fs-udd.rsyd.dk
stssig.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
meeting.rsyd.dk
eboksrest.rsyd.dk
*.booking.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
intra.reg.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
Stsenc.rsyd.dk
intra.reg.rsyd.dk
srvodevidexpe01.rsyd.dk
*.rsyd.dk
srvodeExpE01.rsyd.dk
webmail.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
vpn.rsyd.dk
meeting.rsyd.dk
*.rsyd.dk
sip.praksis.rsyd.dk
*.rsyd.dk
expe02.video.rsyd.dk
EXPE.video.rsyd.dk
ddlsecurity.rsyd.dk
srvodeExpE01.rsyd.dk
meet.rsyd.dk
sip.praksis.rsyd.dk
mammo.rsyd.dk
expe02.video.rsyd.dk
*.rsyd.dk
jgexpe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
test.udkaldssystem.rsyd.dk
fs-tst.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
s201dc-ExpE02.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
mammo.rsyd.dk
*.rsyd.dk
dankost.patientbestilling.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
*.rsyd.dk
open.rsyd.dk
vpn.rsyd.dk
s201dc-ExpE02.rsyd.dk
JGEXPE.video.rsyd.dk
jgexpe02.video.rsyd.dk
meeting.rsyd.dk
mammo.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
*.booking.rsyd.dk
test.udkaldssystem.rsyd.dk
dankost.patientbestilling.rsyd.dk
srvodeExpE01.rsyd.dk
*.rsyd.dk
*.rsyd.dk

Certificate

The complete raw certificate details for meeting.rsyd.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhstbwDTESY5h7DFadCK
mjc8WQZOWuzOnOAFga8vK7xDKNx/iyaGN6SCor6NhaMWHIskw+oYPXr/0X+N1LZz
6uPToPjl4H+G4GftyjJLwY5LdHtVlT2KP0hCWqGa7p/7dl/m57J8SzdSCeeNnAYN
6CxF/RTGE25OlteRXZ6bDQCRTBvlndFHdEcrHE6wiomvl4gJ2n+0wLjiUPbtifzh
iuqkN07Davd+UKq+fKtsMN3OqtJ95PKWqsgVpsw6tO5XyN5+hwi8tnXpQfYerGUa
h/vISMkN2o7mKQ5y/Bv7OWa39MgkG9NupZjJ7LskHqqRMn0RnWIEUoVlQiyaAahK
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26200563736849197130387603867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-03 12:07:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 12:07:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'meeting.rsyd.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23998679655974494308800208066395422726438129176959713875897082222745048388288740694051888422703541921732233788658685676152154107929011689997188814775239897128893275577039501305945089500175319849232883260734129626059324557541146683310519646545409708212315672402977760229477732652158803252279598085026849553901041491059373354585006920567716402783191383369425158163088578446997821174300564346304441614617977067101762081750725178677124535607952024897435579863252667771391978155379261815214759580129350287835707359916042028853887539786710052525459171558547066342301417058797419331254269270980874533456122028617806958316127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeting.rsyd.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6331da823afd7b9043d80d3dd81ca4e7efb10f82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c7367581e4e7195fa1298d5128280762feb0a9dc1a1bbb98e85c49599b231f22e0b561ef057d5f322debba068b2b1e96cc6d0832b38e2ddaf5bdc6a3d555df35c04d620ece68ff3bd210f4a0d31896ba30df0653633f745d9236a5ed01d416a66e52133d83ca3b0a0cb5fe550e4eb16983fcb370d7c6a99d533671995dcf566a8eb58434eecb92f6942b0dbe24c4a587d501d39a097fb3dd83ed41305e46e047ddb854caa21110ba9012827d24db0713848b35051321e159e95de53fd5939daa64770e43680caee97aea903525e0253aad6061a91c231b3ff22cce847ea94f7ce917f9b3f6f60c36f8ff3aba8efd7326c4b9b65d9fae4c0899356244ccdee0a7