www.samsclub.com

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 29:37:5c:1e:af:98:40:20:3a:aa:72:6f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:37:5c:1e:af:98:40:20:3a:aa:72:6f
Serial Number (int): 12755811346525632301235860079
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0a:06:b8:2a:62:f8:dc:55:15:af:73:67:0d:1e:6b:c8:53:79:2f:86
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 95:bf:f4:b2:0a:83:fa:82:f9:01:30:4a:f2:3a:70:f0:03:8d:ab:fd
Fingerprint (sha256): 01:de:13:17:68:92:8d:60:de:62:95:7b:14:8a:1a:6a:b7:04:4f:a9:32:f3:9e:10:26:81:6a:98:11:5c:e2:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.samsclub.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.samsclub.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.samsclub.com
samsclub.com

Other certificates including the domain name samsclub.com

(limited to 100 certificates)
nonprod.samsclub.com
prod-membership-posgateway.cld.samsclub.com
catalog.samsclub.com
nonprod.samsclub.com
pfedcert.wal-mart.com
config-by-category.cld.samsclub.com
sams-labeling-api.prod.cld.samsclub.com
nonprod.samsclub.com
prod-membership-dome.cld.samsclub.com
epic-core-prod.cld.samsclub.com
hubmetrics.samsclub.com
prod-asksam-api.bots.cld.samsclub.com
backroom-delivery.dev.cld.samsclub.com
pc.ui.samsclub.prod.walmart.com
prod.samsclub.com
cf-nonprod2.walmart.com
wem-prod.walmart.com
links.samsclub.com
blog.photo.samsclub.com
gorollick.samsclub.com
smart-alerts.api.stg.eus.cld.samsclub.com
prod.samsclub.com
adlist-api.cld.samsclub.com
nep-stage.services.samsclub.com
stg-geode-linkage-services.cld.samsclub.com
www.samsclub.com
dev-sams-recurring-payments.cld.samsclub.com
photo.samsclub.com
nonprod-int.samsclub.com
ak-prod3.walmart.com
nonprod.samsclub.com
nonprod-intone.samsclub.com
prod-membership-subscription.cld.samsclub.com
*.samsclub.com
vip20-pravaha-qa-https-web-p-1.walmart.com
mbrxo-cpc-api-gateway-qa.cld.samsclub.com
sams-iot-api.cld.samsclub.com
nonprod-int.samsclub.com
supplier.samsclub.com
vip01-misc-qa-https-web-p-3.walmart.com
dev-fresh-inventory-audit-eus.cld.samsclub.com
prod-member-experience-sfclocation.cld.samsclub.com
npclubopsapim.cld.samsclub.com
pravaha.samsclub.com
stage-member-experience-storage.cld.samsclub.com
opinion.asda.com
click.em.samsclub.com
vision.cld.samsclub.com
SWOTrn01.wireless.samsclub.com
experiments.samsclub.com
stg2-tms-load.cld.samsclub.com
www7.samsclub.com
smart-alerts.api.dev.eus.cld.samsclub.com
nonprod.samsclub.com
beacon.walmart.com
payment.samsclub.com
event-horizon-info-eus.cld.samsclub.com
ent-backbone-api-gateway-stg.cld.samsclub.com
stage-membership-metadata.cld.samsclub.com
beacon.walmart.com
mth.api.dev.eus.cld.samsclub.com
fa-nonprod.walmart.com
dev-sams-two-factor-event-processor.cld.samsclub.com
akamai-san41.exacttarget.com
beacon.qa.walmart.com
hec.azsamssplunk.cld.samsclub.com
cf-nonprod2.walmart.com
vip01-misc-qa-https-web-p-6.walmart.com
stg-wallet-api.cld.samsclub.com
sim-dataacquisition-gdsn-takeaction-webapp.cld.samsclub.com
vip12-sams-qa-mobile-api-https-p-5.walmart.com
stg-membership-integration.cld.samsclub.com
cdn.corporate.walmart.com
pravaha-stage.samsclub.com
vip01-4-misc-qa-https-web-p-1.walmart.com
specialoffer.samsclub.com
vip01-misc-qa-https-web-p-2.walmart.com
ccservice-nonprod.walmart.com
pfedcert.wal-mart.com
corporate.walmart.com
nep-pqa.services.samsclub.com
cloud.em.samsclub.com
exports-stg.cld.samsclub.com
webservices.samsclub.com
pfedprod.wal-mart.com
stage-member-experience-search.cld.samsclub.com
dev-membership-subscription.cld.samsclub.com
event-horizon-eus.cld.samsclub.com
fimprodext.walmartbenefits.com
stage-member-experience-dispense.cld.samsclub.com
ak-nonprod3.walmart.com
vip01-misc-qa-https-web-p-1.walmart.com
document.wireless.walmart.com
exports-api-stg.cld.samsclub.com
prod-sams-twofactor.cld.samsclub.com
cf-nonprod2.walmart.com
prodcluboperationsapim.cld.samsclub.com
vip01-misc-qa-https-web-p-6.walmart.com
prod-membership-metadata.cld.samsclub.com
flights.serviceshub.samsclub.com

Certificate

The complete raw certificate details for www.samsclub.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSl4sTWKRCK3//LYT8V9
mrPwTXdLDxJYk+a7FNR6ZqnBmEAZMWOQkfvui82eSkYd1u6it/QjJxEjQ+d548/j
ZQky1X+Ki2iAAsIfLRFBzN2ua2vVnXsKAfgWPVYozxNNHAer/Trr+hRBz8IN2XAb
2cA0OH+2wrDppCYZ3XMlc0/CTjSkhEfqgiXeCpdDy8KJ96tjkw/dcR0l7WHGljGV
4tRHF5qGsdK0SH+ABmbQ/tBmKaEbyj3JHSlz4gVLOxyF6CNEmz1V1T9HTm2aex80
86jdQO+pynFIkle13eac2hvVGVZA058qnLzjRORL19cp87zdd/Zv1cr+GQb6XFy5
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12755811346525632301235860079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 17:36:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 17:36:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.samsclub.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23374536754881184536272908568352020809725031219723485095418924398877808394397380745357892753507238760747576703919940223567399480874519474101607452540733403706767418341647747026471225211961797382451351459546651155174336266695064594716056584509579478081459747758774530549716191390953031888700310149858090381469600073477985453533373229991473459875759689532490527214296586448337694466777253889536909350519072828945113181356686177841256057811612948311041832471524544363036621976812419229838167442441593745338678455967154228977913017782604451225104039853880929290191800074894713018984427146524842644971607521586884219025811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a06b82a62f8dc5515af73670d1e6bc853792f86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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