communication-trackontrade.deloitte.nl

- Deloitte Group Support Center BV -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:43:75:36:98:05:b6:05:92:7a:e7:e5:6c:94:38:65:98 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Deloitte Group Support Center BV

Organization: Deloitte Group Support Center BV
Organization unit: Tax Technology
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:43:75:36:98:05:b6:05:92:7a:e7:e5:6c:94:38:65:98
Serial Number (int): 1492227845830059767000435318873193153324440
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: c6:b7:2f:99:b3:b6:87:6f:0b:d1:82:eb:66:04:7f:60:e9:31:4b:b0
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 75:42:cf:a6:77:d3:eb:15:24:f3:e4:4a:35:9d:ea:e6:da:3b:9b:a4
Fingerprint (sha256): 00:6e:9c:92:f1:0c:f9:a1:9b:55:20:47:40:44:6d:d5:bb:17:0f:e1:63:84:45:51:9f:c6:cf:e7:3d:36:e5:43

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate communication-trackontrade.deloitte.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communication-trackontrade.deloitte.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

communication-trackontrade.deloitte.nl

Other certificates including the domain name deloitte.nl

(limited to 100 certificates)
communication-trackontrade.deloitte.nl
www.beglobal.shop
magazine.deloitte.nl
*.iapps-t.deloitte.nl
ispacemobile.deloitte.nl
getsupport-d.deloitte.nl
s4hop.sapdemo.deloitte.nl
tax-i.deloitte.nl
e.deloitte.nl
edgejourney-s.deloitte.nl
viewold.deloitte.nl
communication-test-trackontrade.deloitte.nl
4me.qa
view.deloitte.nl
secureupload.deloitte.nl
secureupload.erslab.deloitte.nl
docqminer-model-staging.clipper-nonprod.deloitte.nl
sip.deloitte.nl
wintrackertaxlegal.clipper-nonprod.deloitte.nl
*.deloitte.nl
remotevpn.deloitte.nl
view.deloitte.nl
aeoscan.deloitte.nl
usap42.us.deloitte.com
usap42.us.deloitte.com
ourbrand.deloitte
alumni.deloitte.nl
secureupload.deloitte.nl
das.deloitte.nl
xray-john-old.clipper-nonprod.deloitte.nl
communication-test-trackontrade.deloitte.nl
getsupport-s.deloitte.nl
usap42.us.deloitte.com
alumni.deloitte.nl
communication-trackontrade.deloitte.nl
ourbrand.deloitte
webmail.deloitte.nl
meet.deloitte.nl
ourbrand.deloitte
investoronboarding-d.deloitte.nl
dataplatform-t.deloitte.nl
invisionweb.deloitte.nl
fast50.deloitte.nl
remotevpn.deloitte.nl
view.deloitte.nl
meet.deloitte.nl
brainspacenew.deloitte.nl
invisionwebsso.deloitte.nl
ourbrand.deloitte
sip.deloitte.nl
annualreport.deloitte.nl
4me.com
sapclientvpn.deloitte.nl
dataplatform-d.deloitte.nl
monitor-d.drop.deloitte.nl
taxifdtst.deloitte.nl
mail.deloitte.nl
events.deloitte.nl
meet.deloitte.nl
*.iapps.deloitte.nl
www.deloitte.nl
regview-acc.clipper-nonprod.deloitte.nl
usap42.us.deloitte.com
academy.deloitte.nl
ispace.deloitte.nl
aeoscan.deloitte.nl
tax-i.deloitte.nl
mail2.deloitte.nl
oraclecloudextractor.clipper-nonprod.deloitte.nl
*.iapps-s.deloitte.nl
roulette-dev.deloitte.nl
www.deloitte.nl
*.4me.qa
tendertracker.clipper-nonprod.deloitte.nl
4me.qa
academy.deloitte.nl
confirmit.deloitte.nl
usap42.us.deloitte.com
*.clipper-audit-nonprod.deloitte.nl
communication-trackontrade.deloitte.nl
tax-i-d.deloitte.nl
secureupload.deloitte.nl
4me.qa
4me.qa
usap41.us.deloitte.com
oraclecloudextractor.clipper-nonprod.deloitte.nl
regminer-acc-admin.clipper-nonprod.deloitte.nl
dkmt.deloitte.nl
alumni.deloitte.nl
webapps.deloitte.nl
sts.deloitte.nl
sso.deloitte.nl
rb-client-impact.deloitte.nl
meet.deloitte.nl
usap42.us.deloitte.com
monitor-d.drop.deloitte.nl
sip.deloitte.nl
mail2.deloitte.nl
publications.deloitte.nl
communication-test-trackontrade.deloitte.nl

Certificate

The complete raw certificate details for communication-trackontrade.deloitte.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/RatiXzcXz+B2kaQRYk
XLIwIgee7q7+XVXidRmvzJgzDcmuLtmFNc8JQxZZxG0b6PwmStBuOA7sGf/MmfFh
3Gg7rm81Lq93kEx+5v7AhRi7UM4tx0cL9ezz8X09S6+zgm6f+a7/p9+N3tQ0ZZnd
520PnW4Bf5C8dczbuxDj7Q+EMIGrCDCxWn3GOAf8Pg1nK8kadC+39kmDMdOkvY92
IAud60ZJrPG4QFXgJbVWYNdIEmiScVUejzfNEiMX5jth7bUB4+kRYDy78PgVFyRw
5uy5EIwzSddh4QWOr+3IjwM/DPcweit8sj2R+r1fVNPwgKTIJZLRzKyz9WIPjl+5
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492227845830059767000435318873193153324440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-04 12:54:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-04 12:54:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tax Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deloitte Group Support Center BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'communication-trackontrade.deloitte.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24232011865422326031366835499463944102256204203583967305128383237945561043296781607627496500636802919772197583795514419250421227198772100819787085550684600583473704529551578483923246940884368985352418344022280727653090148098010888452214867532889407169063468322498948349522964505864438638923818726508646801969795189341903922011902175699397935416604412806399934471850311457659105175370943068865949860036056510159859744456960907308436833855264398771814782903572276703295791825135008950782441246278543480587709893939753469710184555674595218577335313408366266306042006983296175095766904112170756701667772958560568899254629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communication-trackontrade.deloitte.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6b72f99b3b6876f0bd182eb66047f60e9314bb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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