*.tamata.com

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 70:e4:91:d0:af:96:9e:a2:44:a8:24:0e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.tamata.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 70:e4:91:d0:af:96:9e:a2:44:a8:24:0e
Serial Number (int): 34938644779578041202068956174
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 90:d5:f7:c9:03:d8:0a:d3:9c:63:9e:4b:c4:da:2f:fb:0f:0f:71:97
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 3f:35:e9:a6:d1:cf:83:12:e2:48:9c:c6:55:a4:7c:4b:aa:fc:7c:09
Fingerprint (sha256): 03:84:97:7d:87:7e:e0:db:ad:f0:7e:b1:af:9b:27:9a:be:af:35:79:94:62:1b:89:79:51:77:f8:1a:25:45:17

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.tamata.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tamata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tamata.com
tamata.com

Other certificates including the domain name tamata.com

(limited to 100 certificates)
*.tamata.com
digitalgoose.io
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
winpoint.io
magentocloud37.map.fastly.net
smack.chat
sc.d1.stx.world
aftonline.com.ar
magentocloud37.map.fastly.net
metaideas.studio
mail.tamata.com
*.tamata.com
dev1985x.podkite.com
mail.tamata.com
leveragegroup.it
beenfo.com
movie-db.lucianiernye.co.uk
www.canadadayincumberland.com
ancaoutfit.com
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
www.jasoni.com
magentocloud37.map.fastly.net
startuptec.com
sushidog.5loyalty.com
harano.abc.br
revisit-app.com
magentocloud37.map.fastly.net
vt-dashboard.getfinstack.in
magentocloud37.map.fastly.net
beta.motormerchants.com.au
portal.equity.cwltech.com.br
mail.tamata.com
mail.tamata.com
reidasjoias.appshare.com.br
win.tamata.com
www.drinkery.menu
linoleum-public.bambuser.com
mail.tamata.com
omentum.app
*.tamata.com
policy.demo.autolive.app
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
linevendor.tamata.com
gearchain.io
magentocloud37.map.fastly.net
www.jasoni.com
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
firebase.jodiemason.me
shoplygrocery.com
magentocloud37.map.fastly.net
dlh-hayati-kotim.rinjani-parahita.com
www.ur1s.net
magentocloud37.map.fastly.net
yonimoonyoga.de
magentocloud37.map.fastly.net
auth.kamoky.com
www.biofusionmd.org
app.h3skills.com
hazelthexton.com
alexbaileyresume.com
app.borbalo.ge
getahelp.in
admin.test.blushingowlstudio.com
dev.myhelm.io
signandfill.whizpool.com
earrn.app
magentocloud37.map.fastly.net
maximare.kidletics.de
shimmersweets.com
magentocloud37.map.fastly.net
digitala.universeum.se
bookofthemonth.ali-m.net
cta.ajitama.io
www.solidculture.co.za
magentocloud37.map.fastly.net
oynxandrose.com
redmusic.ca
www.bloinx.io
magentocloud37.map.fastly.net
www.mintmyguitar.rocks
reversepp.com
daisymaebbq.com
magentocloud37.map.fastly.net
meet.beyondboundari.es
magentocloud37.map.fastly.net
cotora.co
magentocloud37.map.fastly.net
go-qa.spark.com
*.tamata.com
magentocloud37.map.fastly.net
magentocloud37.map.fastly.net
www.collisbrowne.com
app.borbalo.ge

Certificate

The complete raw certificate details for *.tamata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDhlYXLqdDIQ/cpa1gA7
U3AllgDShW/H0E3q3mwV9Ml4L9b9gAsnqQMy6jaBYgXj39CrFV4tOMk8FKcHiBZY
IzI5p3FxKuUkky5pxrKUeRmwQnrYRhCqzt31YXq+cTrIV1TgdurxPbohnoZ3KKr1
wDE8/2oGdzESPZbo1MJOmeljCkW/7aWnjAiMiyRLMlk3Nn9lUrKBoS7R2nTO14V3
X6sCcoS/18kZayrFw1K2G2m59eLJyS1EkCt/X8q7W63cddOS7nsCk54CQpxUE+sa
gNIFeky64PKV6Xe5scJPXqntyaw/QZgpTN/KWDbbYABnJzQQRG41Eec3+LO+ZGMv
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34938644779578041202068956174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 18:48:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-13 18:48:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tamata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21740798367227171374926695922597354355085698209714558125061728913525790771115147870570462641975750430968072793281187230875228631738140267625544504086224833056150025385888154744503753157769360084438482394590866968297434906162065813117277544672806824780325719746397275914262283950683551360908273534606720528875755457628692624909003240283115575361763980856737632380999768118615357836453069091809898307994466364984888375250111745765407559639207531104291084485460694776080226034364103769470346286029067835633384703568358776714415215389181945934728255695287155262619891083367707905466730650425512822122245760403309074788337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90d5f7c903d80ad39c639e4bc4da2ffb0f0f7197
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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