www.televic.com

- TELEVIC GROUP NV -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:e5:48:1c:9f:49:e1:ab:e1:2c:67:b6:a8:c7:8e:95 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

TELEVIC GROUP NV

Organization: TELEVIC GROUP NV
Locality: Izegem
Country: BE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:e5:48:1c:9f:49:e1:ab:e1:2c:67:b6:a8:c7:8e:95
Serial Number (int): 10495094552276333806435183625899576981
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d2:71:45:5b:3b:3b:a5:e3:b7:01:32:e1:b9:34:37:f2:5f:b7:3a:d9
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 50:b2:e6:a0:09:91:09:03:2e:5f:db:5d:de:48:e6:36:9b:b8:6b:34
Fingerprint (sha256): 04:ef:a9:b8:84:f7:24:e0:90:d3:8b:3f:83:73:cc:07:07:cd:75:38:25:53:23:34:a9:23:13:f9:2b:bb:75:3c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.televic.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.televic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.televic.com
www.televic-healthcare.com
www.televic-rail.com
www.televic-conference.com
www.televic-education.com
televic.com
televic-healthcare.com
televic-rail.com
televic-conference.com
televic-education.com
televic-healthcare-solutions.be
www.televic-healthcare-solutions.be

Other certificates including the domain name televic.com

(limited to 100 certificates)
www.televic.com
info-healthcare-france.televic.com
www.televic.com
test-letsencrypt.televic.com
bo.mylemonade.fr
www.televic.com
confero-staging.televic.com
imohsenb.com
www.televic.com
nexus.televic.com
*.televic.com
*.televic.com
www.televic.com
tra-test-api-us-west.televic.com
chornous.net
kds.tastio.com
sip.televic.com
multikiosk.aigens.com
mutiailocandia.app
www.cjkaleel.co
*.televic.com
www.televic.com
vireum.fi
www.grupogla.com
invite.noja360.com
www.jasoni.com
dashboard.geomove.io
predatabase.com
xnovatrade.com
*.televic.com
*.televic.com
sip.televic.com
notenzoo.de
vms.clamwave.com
www.ibrahimtech.dev
wastelandpunk.tryhard.dev
influencebeauty.me
www.zenalytics.org
offscore.band
ajakhtar.com
*.televic.com
www.televic.com
test-letsencrypt.televic.com
*.televic.com
*.televic.com
service.eu.wowworks.org
citrix.televic.com
www.simpleasido.com.au
confero-staging.televic.com
www.jcbyedekparca.com
www.televic.com
medcenter24.com
csg.televic.com
meinetermine.eu
mpp.commercial-marketing.apps.mymorri.com
octopus.education.televic.com
www.danielmacias.me
tra-test-api.televic.com
services.televic.com
srv-tra-bld-lnx4.televic.com
www.televic.com
mocskolodo.setalobudapest.hu
www.televic.com
www.televic.com
www.ibrahimtech.dev
tra-test-api.televic.com
*.televic.com
hotelgoldenpalacepuri.in
exchange.televic.com

Certificate

The complete raw certificate details for www.televic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10495094552276333806435183625899576981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Izegem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TELEVIC GROUP NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.televic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763194330588441589807808927497511700819861707386850296422904518628263341878968891625605779296338865680743327266268711450452378960200527972766534892771066824468926621003496528101921314274758159107026004963290705531014304766363052608515324310256421581524557888962584554603656479025485624723537973948602156591501460452153676216043981182695147774491312681611122578713098853523396820728194549893705014122969841106887466362692509481608306039959697113561577058905500855504421562846021109916927294592184711902710484017121053212291110214382905125714243906892583735569692227265403116636515982020093607093954447557979311880959235578724994653210130855653826399724222246852053246467686673991583492490454317009924858853599319177541442391680625001546781016115514299647692353806909467120743377090810652882592112712678703789567724539736758125366715676878046876165903870907002630411192702400641895220072748633603656111253896264910000436012540632601397328960554822002254760439280391004890920779157559641703968852659658632530897799047031459791358734840922956544515065699635731022884346900471631093127839449088089431462221254482209348626105231966911583242143981961173850763796753350099238512582842506065776149825881089715027023207924354743791833286709569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d271455b3b3ba5e3b70132e1b93437f25fb73ad9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic-healthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic-rail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic-education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic-healthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic-rail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic-education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televic-healthcare-solutions.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televic-healthcare-solutions.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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