test-shop-f298hf2.fanmio.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 77:d0:d6:45:54:07:e3:53:9f:f4:f2:e6 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test-shop-f298hf2.fanmio.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 77:d0:d6:45:54:07:e3:53:9f:f4:f2:e6
Serial Number (int): 37081184604527639408950964966
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ac:93:36:aa:e7:14:24:c0:d7:dd:9a:4d:2f:9f:cc:1b:40:2d:5a:db
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): b1:1d:84:87:95:16:0e:2f:2d:70:33:ca:0c:c2:a0:44:f3:22:80:d6
Fingerprint (sha256): 03:c6:24:ef:72:73:1c:09:47:4d:af:4a:1d:4b:21:ad:db:2a:82:0c:2f:4a:2c:66:4a:e6:bc:40:7d:cf:bf:af

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate test-shop-f298hf2.fanmio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-shop-f298hf2.fanmio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-shop-f298hf2.fanmio.com

Other certificates including the domain name fanmio.com

(limited to 100 certificates)
dev-shop-8v55ra.fanmio.com
fanmio.com
fanmio-web-issues-cpix.run.fanmio.com
aus.icpa.dev
dev.app.seodity.com
fanmio.com
help.fanmio.com
test-shop-f298hf2.fanmio.com
tnlvsncorp.danno.nz
www.omnom.xyz
admin-fix-high-priority-issues.run.fanmio.com
fanmio.com
bendesk.de
ao-mobile-ut-analytics.amtrustfinancial.com
staging-8v55ra.fanmio.com
www.zbang.agency
egemas-lawyer.bingkaimedia.com
app.teambuzz.io
fanmio-web-issues-zip-code-validation.run.fanmio.com
apnaconsult.com
staging-a3ymg5.fanmio.com
www.fanmio.com
admin-fix-session-duration.run.fanmio.com
alia-admin-web.reaktor.ae
pulsomusic.com
fanmio.com
test-shop-f298hf2.fanmio.com
fresh.bestnotes.com
fanmio.com
dev-a3ymg5.fanmio.com
fanmio-web-feature-klarna.run.fanmio.com
www.stg.burnian.com
blackboard.agency
my.campeasy.com
fanmio-web-features-alarm-dashboard.run.fanmio.com
app.fanmio.com
help.fanmio.com
justice.is
admin-develop.run.fanmio.com
www.biletofisi.com
staging-shop-dx381fof48.fanmio.com
dev-shop-8v55ra.fanmio.com
www.fanmio.com
identity.elita.si
arsfeld.com
www.aubscenity.com
test-f298hf2.fanmio.com
fanmio-web-fix-session-fixes.run.fanmio.com
test-shop-f298hf2.fanmio.com
fanmio-web-issues-fix-chrome-browser.run.fanmio.com
fanmio-web-mbutan-patch-1.run.fanmio.com
tnmop.in
fanmio-web-feature-peek-to-screen.run.fanmio.com
www.hosteljoinville.com.br
staging-shop-dx381fof48.fanmio.com
fanmio-native-graphql-github-actions-test.run.fanmio.com
m.toktik.co
app.youareaceo.com
cabyhufntb-shop-production.fanmio.com
dev-shop-8v55ra.fanmio.com
unmodified.info
fanmio.com
*.test.fanmio.com
fanmio-web-feature-new-order-webhook-2.run.fanmio.com
fanmio.com
fanmio-native-graphql-master.run.fanmio.com
test-shop-f298hf2.fanmio.com
www.fanmio.com
fanmio-web-issues-3849-sharing-run-domain.run.fanmio.com
dev.conversell.ai
www.jasoni.com
help.fanmio.com
ethnicbridalstudio.com
www.itranslate.com
staging-dx381fof49.fanmio.com
staging-shop-dx381fof49.fanmio.com
fanmio.com
fanmio-web-issues-video-player.run.fanmio.com
fanmio-web-feature-product-page-validation.run.fanmio.com
app.powtorkazpolskiego.pl
fanmio-web-features-casting.run.fanmio.com
admin-issues-aws-vod.run.fanmio.com
beltur.orwi.app
test-shop-f298hf2.fanmio.com
dev-shop-8v55ra.fanmio.com
www.fanmio.com
www.brareytv.com
api-dev.sokontokoro-factory.net
staging-shop-8v55ra.fanmio.com
fanmio-native-graphql-issues-ably-optimization.run.fanmio.com
fanmio-web-develop.run.fanmio.com
floerenaap.be
cabyhufntb-shop-production.fanmio.com
www.charaplus.com
fanmio-web-feature-fight.run.fanmio.com
www.churchzeit.com
dev-shop-8v55ra.fanmio.com
dashboard.dev.finstart.co
fanmio-web-develop.run.fanmio.com
www.hagel.app

Certificate

The complete raw certificate details for test-shop-f298hf2.fanmio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jy7H+4U+qV2Bqd9s2SD
csn5DFxcXjX4e1mDxDhr/Wt6OchP0Sn7PPG6UQREsx+rwH5ZmUlmUIsEJf7SSa3p
YJkFGSCSiYtsOc73d0Onx9yjgysudBrxm0dpMymrR00f0pajV/xRYjEjvjTHfLjh
6xgqBOYeD9kIhntVaZKqMnZ57hNuJlnv1APMNLUcpy4H3m+c/dihVgND16aK63pU
mC/JJPZ75tuUjtzfHuoeyfEKqzMQFIdURf/TGjalxJicGcqT0sc/wR2jmB69UF2v
/egeoRRYhw6cm56Gy2QWi5JKK05/PHDhASfkSjMkeALbm05/2wR7djEsWFvHB46G
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37081184604527639408950964966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 07:34:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 07:34:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-shop-f298hf2.fanmio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28054851253010987394477384004578633817762052124226331793725943195420612206239511463308301668186260320793493843222245855405775020154050005027241228667020250346159055082230383275012090026553792676295269998213709047026900668263422319690166149819039807382615342737824957010572208149007613164663235026930053877309965202351461329608043358345783458733589885365442545503742031499834602206349194887961127881654567195935357672040278624474988098435315080469683151634827665908551827987974814428567253321956796456095700827028479282308451111696565506090786154945889494849227740668606863961301851558052262844849274875710920694073083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop-f298hf2.fanmio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac9336aae71424c0d7dd9a4d2f9fcc1b402d5adb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001673a5779e6000004030046304402206bdd3ea5d1fb4d8fc6c76b4391c20161d1ec87f9a7eb2872d1b53a8cbeb71d570220341b30fe8028c0a66360413a7b1228ee20f1add188ecf91ad8e60c9d0cce24100076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001673a5778b6000004030047304502202ed89430d7e4ea3d6c12917d0c1f5f99cdca804ed05d76f4818295c4ae667cc1022100e11bc158fde97cce42d2272bf06bd963be795c3f1c20f61098a46d66ec643a6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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