www.figaf.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 27:89:cb:8d:fb:b3:e5:1e:29:0c:95:74 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.figaf.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:89:cb:8d:fb:b3:e5:1e:29:0c:95:74
Serial Number (int): 12236499479843690850277954932
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1b:78:d7:26:a6:f0:87:93:c7:72:9d:20:16:b6:d2:d8:d9:ac:4c:32
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 2d:c5:c7:1b:4f:49:43:f3:f1:3d:8c:41:6f:cd:4b:d5:00:2e:0e:a9
Fingerprint (sha256): 04:27:59:50:39:cb:5f:86:8b:80:7d:67:f6:8c:af:5f:7f:38:11:32:e4:76:46:dc:fd:8d:a8:71:2b:c8:bf:67

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.figaf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.figaf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.figaf.com
figaf.com

Other certificates including the domain name figaf.com

(limited to 100 certificates)
support.rowlinson.uk
help.wellnessgate.hu
recruitment.laveraitalia.it
www.figaf.com
forms.ksplusplus.de
help.wellnessgate.hu
app.figaf.com
thejefferson.support.ignitehospitality.com
forms.pentiq.com
t-mobile.mijnfleetkennis.nl
forms.ksplusplus.de
formulario.alosoxal.es
help.wellnessgate.hu
help.wellnessgate.hu
recruitment.laveraitalia.it
support.mediaphonix.de
help.wellnessgate.hu
help.wellnessgate.hu
formulario.iniseg.es
podrska.cornerstone.rs
recruitment.laveraitalia.it
desk.jetenterprises.co.uk
desk.jetenterprises.co.uk
support.tpihub.co.uk
support.razit.ovh
app.figaf.com
irt.figaf.com
forms.regionalsafetygroup.co.uk
forms.aimsx.io
go.leandirekt.de
recruitment.laveraitalia.it
recruitment.laveraitalia.it
help.wellnessgate.hu
recruitment.laveraitalia.it
landing.figaf.com
forms.centimo.nl
halloween.rusgymnasium.at
info.digitalizadores.es
my.samuelz.com
support.phocealight.fr
figaf.com
forms.yarvis.de
forms.regionalsafetygroup.co.uk
support.pcservicedesk.nl
help.wellnessgate.hu
helpdesk.hinweisgeberprogramm.de
recruitment.laveraitalia.it
irt.figaf.com
formulare.allgaeu-triathlon.de
forms.the-minted.com
recruitment.laveraitalia.it
help.wellnessgate.hu
support.blits.ai
desk.littleit.net
form.studiin.com
figaf.com
cantare.smartid.ro
vragen.oamkbsittard.nl
form.studiin.com
help.wellnessgate.hu
support.mediaphonix.de
help.wellnessgate.hu
thejefferson.support.ignitehospitality.com
podrska.cornerstone.rs
forms.lawplus.co.uk
help.wellnessgate.hu
support.orfis.fr
helpdesk.hinweisgeberprogramm.de
figaf.com
splitpay.dorset.tech
claims.saneux.com
recruitment.laveraitalia.it
help.wellnessgate.hu
figaf.com
podrska.cornerstone.rs
desk.littleit.net
halloween.rusgymnasium.at
support.erp-link.fr
support.rowlinson.uk
forms.lawplus.co.uk
desk.jetenterprises.co.uk
support.erp-link.fr
help.wellnessgate.hu
forms.nichecrm.builders
app.figaf.com
support.erp-link.fr
help.figaf.com
podrska.cornerstone.rs
splitpay.dorset.tech
support.mediaphonix.de
help.wellnessgate.hu
support.pcservicedesk.nl
vragen.oamkbsittard.nl
forms.the-minted.com
help.wellnessgate.hu
support.fortifiedit.co.uk
t-mobile.mijnfleetkennis.nl
app.figaf.com
secureforms.redhuntlabs.com
irt.figaf.com

Certificate

The complete raw certificate details for www.figaf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ3HIzfNdBOXHEqAQ413
Cb88GQs5+fKq+M/bMXlkwhW4TQLvt2hi3rI2ddcFnoo6Pg6gyMnEvW61oPtC59xC
WWi9ibfqyWxzRps+1lXkHSGkZ3+faTmvCkIP/0crVkk3KaWKb+6at/Qa1eVTWhpS
LGL6ZKpw1LRdp7OxHC5kTnql2Q1ausI0MFHeHrQJJAWCjjA1rbd92kDgXGhm36PR
ZaLyskc29MvjoGPp2I0s2iqdm0upB4OnvNE1UedPoOLvDAsjnJpjIyzlariY+TsO
z5FNDxo0TemC9f7cmlwH9vWJRkmCtjW+wdxr18JO7KpxncZAYtHHtTiazfhphDGo
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12236499479843690850277954932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-16 08:59:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 08:59:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.figaf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21846020885535732275580570999831395278381997145901713591444902712787219472258758530017930250511085119258320891166542366460045600099087845743661619621561016903124879394352042609295454251779075587516320621055902270363260761700340920705277444968547648537518954537889385561909196293394871435926384549546580899836320863553264470027337158076246552098061242096470659021537570505834215803095729538886681077696094015678968864042580072140351281885388141555489727594239664651787336162028269202738246921432784009946006735753129231614168946049741383568362363109798580645943357026793109609119793287887882982624386234232191132477463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.figaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figaf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b78d726a6f08793c7729d2016b6d2d8d9ac4c32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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