*.ep.europa.eu

- European Parliament -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 76:3a:fb:08:b9:b9:4d:dd:da:c1:2e:d1 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Parliament

Organization: European Parliament
State / Province: Luxembourg
Locality: Luxembourg
Country: LU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 76:3a:fb:08:b9:b9:4d:dd:da:c1:2e:d1
Serial Number (int): 36590534331400332855243517649
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bf:61:d4:db:f9:55:a7:05:e1:53:4b:9b:dc:6d:9d:6d:e3:f3:f1:70
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 22:25:18:e5:bb:a3:02:c3:a0:35:47:42:f2:56:b7:37:7e:ad:2d:46
Fingerprint (sha256): 03:97:01:64:97:25:b8:5f:6e:5f:41:4a:5e:ff:7b:34:c0:bc:b6:7f:36:2f:95:aa:92:af:87:f9:aa:46:9a:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.ep.europa.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ep.europa.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ep.europa.eu
ep.europa.eu

Other certificates including the domain name europa.eu

(limited to 100 certificates)
cpvoextranet.cpvo.europa.eu
www.cmfb.europa.eu
esubweb-xcomp.ema.europa.eu
*.frontex.europa.eu
nuclear.jrc.ec.europa.eu
acc.nsl.consilium.europa.eu
prd.frontex.europa.eu
www.easa.europa.eu
vaccination-info.eu
www-s.eige.europa.eu
cyclone.enisa.europa.eu
www-s.eige.europa.eu
ews.eeas.europa.eu
connect19.ca
portal.europol.europa.eu
staging.cedefop.europa.eu
5691420614590464-fe3.pantheonsite.io
clearinghouse-oef.jrc.ec.europa.eu
a-sdw-wsrest.ecb.europa.eu
dns-vetting1j.map.fastly.net
rvd.ema.europa.eu
a-procurement.ecb.europa.eu
fmapps.ema.europa.eu
monthlyanalysis.frontex.europa.eu
euctis-preprod.ema.europa.eu
bauth1.europarl.europa.eu
euctis-uat2.ema.europa.eu
mail.frontex.europa.eu
cbs.easo.europa.eu
nirvana.f4e.europa.eu
erc.europa.eu
sealingservice.grants.ec.europa.eu
a-talent.ecb.europa.eu
*.in.ep.europa.eu
r2.shared.global.fastly.net
odin.jrc.ec.europa.eu
idm.f4e.europa.eu
circulareconomy.europa.eu
opmd.publications.europa.eu
dev.edpsweb.edps.europa.eu
eulisa.europa.eu
eudravigilance-human-training.ema.europa.eu
sip.cepol.europa.eu
cyclone.enisa.europa.eu
test-eguides.osha.europa.eu
*.eeas.europa.eu
knowledge-base.inspire.ec.europa.eu
team-europe-partners.network.europa.eu
fch.cust.concepto.ch
*.euipo.europa.eu
cti-chat.enisa.europa.eu
webmail.eca.europa.eu
mobiledw.tech.ec.europa.eu
setis.ec.europa.eu
alumni.europa.eu
stsext.ema.europa.eu
*.stress.ec.europa.eu
biodiversity.europa.eu
us-server2.cedefop.europa.eu
mobile.tech.ec.europa.eu
r2.shared.global.fastly.net
edps.europa.eu
e3p.jrc.ec.europa.eu
eudragmdp.ema.europa.eu
bi.ema.europa.eu
nexus.cis.consilium.europa.eu
cbrne.jrc.ec.europa.eu
owa.ema.europa.eu
aula.frontex.europa.eu
*.fra.europa.eu
*.discomap.eea.europa.eu
a-cms2-ro.ecb.europa.eu
organised-crime-corruption-track-record.ec.europa.eu
sip.era.europa.eu
r2.shared.global.fastly.net
webanalytics.acc.fpfis.tech.ec.europa.eu
ssl861147.cloudflaressl.com
dns-vetting1j.map.fastly.net
webstats.eit.europa.eu
cewe1.eurojust.europa.eu
e3p.jrc.ec.europa.eu
a-www.ecb.europa.eu
5691420614590464-fe3.pantheonsite.io
enet.cepol.europa.eu
*.cedefop.europa.eu
SafeOnWeb.eurofound.europa.eu
www.eit.europa.eu
jt.ec.europa.eu
list.aasc.europa.eu
pgateway.ema.europa.eu
eit.europa.eu
restricted.eurojust.europa.eu
*.cooperation.enisa.europa.eu
esvac-test.ema.europa.eu
esm.europa.eu
epwa.europarl.europa.eu
*.frontex.europa.eu
isportal.berec.europa.eu
sip.eib.org
economic-policy-committee.europa.eu

Certificate

The complete raw certificate details for *.ep.europa.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJhH9Myro6O+aBOGREtJ
wPTqzcgMtlBks/c3bYcI8JiiOnEY5IQG6YwwxwcfORcVK+YHCnUZqN/LP5pib8Mi
f3r91so6RfferAlrH/R+kTzqK3B2ho7S9z65ZaCf7zi/0k3HLXU/JqHumRxk65Mg
P13ZGdppHuGkXqJooFjIM1RbgtLqqIBf09zeLseOfvzM6ZRj6vd6Dnm5edhQ0eZD
cMZDWctvhv4l2QyhArqx7yRAFv6QaOgeV8cFtlkp2QnG9dHuvzH/tozY89Ri60kc
tTisfjfoPGHxoPKK2n1loCjp87WeLlv/QAHne3XKQYIjSIsUI4ZHbmp4u7wbIyt5
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36590534331400332855243517649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 14:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 14:11:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Parliament'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ep.europa.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23807893932459680660930996866945734914681147883517306585729303868491584689927067681284870142511319297345458871182817367812160724147174529117341052781796478117785259259918544839689119246919781093301579347415257174303091003247914481301578068808693373091056460665033237376283786003234694426115287314770406624735531695143254610906187492225814325909771338036927311386761662029560831019969462887654732989903445675771828859121398481977490372949502504949847722904174701040564879906414311931735159135670259934251475861079871648008805796495957545585685005691642722121857065337917172602355688054290097085434141882725050423671101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ep.europa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep.europa.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf61d4dbf955a705e1534b9bdc6d9d6de3f3f170
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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