*.23demo.com

Issued by GlobalSign Atlas R3 DV TLS CA 2022 Q4

About this certificate

This digital certificate with serial number 01:d2:c6:61:f9:6c:01:97:f0:0e:38:c2:36:01:81:8f was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.23demo.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d2:c6:61:f9:6c:01:97:f0:0e:38:c2:36:01:81:8f
Serial Number (int): 2423634015502855548435865107618169231
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 12:b6:9e:28:e6:05:aa:77:2d:f8:73:51:24:fa:f0:27:a9:1d:9d:37
AuthorityKeyId: 88:68:d9:1f:11:c4:0e:1f:9b:89:e0:a0:42:77:5f:c3:79:8e:c3:6e

Fingerprint (sha1): ab:e9:a1:15:c6:c9:ad:52:09:55:40:99:07:92:b7:fb:8e:86:9e:6e
Fingerprint (sha256): 01:85:e4:58:b6:87:77:7f:ab:91:65:5d:5a:b2:57:54:66:47:76:2f:07:a9:4d:c7:e5:9f:fb:c4:d0:93:c4:71

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl

Check the revocation status for certificate *.23demo.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.23demo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.23demo.com
*.23video.com
*.personalvideo.co
*.videomarketingplatform.co

Other certificates including the domain name 23demo.com

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
*.23demo.com
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
*.23demo.com
twentythree4.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
twentythree.net
twentythree4.map.fastly.net
twentythree.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
twentythree4.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree4.map.fastly.net
twentythree4.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
twentythree.net

Certificate

The complete raw certificate details for *.23demo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCfGvP0dnCF+l6O+ROjj
nOZhI7ZjxenTT45Mq2AbnwgC4Nu6XvFnGFDvHXia3lVNmxTZM8o3gftr6MgEabnu
ov/bGQVe+WoVqjbp0y5S/mxM5T+wwTrt5qgUFrQmtM2v+lXh4vTPokx9WUQb/dQ7
yz8TMHHv+/wj0fZZeNlHRSRIDpu/u2GvJnaThJl9dfnzCe+FM93kf50ZUjXlLE5s
2PUt3CBlSsEAbPLKQE9XacQ9Jj8KrYj+h6RJ6JgNbl30G6m/u2grgV5LBkCqlN7a
TjzawQ273nL1dk99FzRryl9IXW/1lVWtEiUxMp2MFPQfWmcpWE3Ut1T6VsH1Buje
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2423634015502855548435865107618169231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2022 Q4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 12:25:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 12:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.23demo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22742509328933613263570479604930624479232537938225747519759060035342976830298128969477520584738616711652673204484586320209883256717137417839001728614110276908788667747596576689218468487197385843552378244948990807881686918657101531693785276426157250904591650748214433226667722617098835461220338439468960324718653266361952965347461305347325079904061942016886091355500722942081568229311823179422632830987663490535614168011268347071208353279482683608396749033830465031853593832532072405836776104267557138165892373456460683428349260597507408402305202213798962878630379120138379489195576452077835083151694516443797399330387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.23video.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalvideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videomarketingplatform.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12b69e28e605aa772df8735124faf027a91d9d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8868d91f11c40e1f9b89e0a042775fc3798ec36e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2022q4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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