c1sdidwapp004.stgadegov.ae

- Department of Government Enablement -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 34:32:ce:fc:69:32:2f:77:5c:5c:3c:43 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department of Government Enablement

Organization: Department of Government Enablement
State / Province: Abu Dhabi
Locality: Abu Dhabi
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 34:32:ce:fc:69:32:2f:77:5c:5c:3c:43
Serial Number (int): 16154644265345826066660080707
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 06:fb:6a:11:28:f3:2a:11:8f:f3:83:ef:91:c2:03:96:d5:2c:ad:78
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5d:2e:29:96:70:c9:97:ca:63:71:a1:e9:d6:cb:67:ec:09:fa:48:24
Fingerprint (sha256): 07:d5:15:73:c7:f2:e7:02:59:ae:3e:01:3b:b6:51:84:59:fe:3b:2d:ea:09:84:09:12:45:ef:28:9d:8a:d6:33

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate c1sdidwapp004.stgadegov.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c1sdidwapp004.stgadegov.ae

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c1sdidwapp004.stgadegov.ae
www.c1sdidwapp004.stgadegov.ae

Other certificates including the domain name stgadegov.ae

(limited to 100 certificates)
IS1002APP129.STGADEGOV.AE
c1sdidwapp004.stgadegov.ae
IS1002WEB112.stgadegov.ae
IS1002APP118.stgadegov.ae
IS1002APP131.stgadegov.ae
IS1002APP130.stgadegov.ae
IS1002APP119.stgadegov.ae
IS1002APP117.stgadegov.ae
IS1002WEB031.stgadegov.ae
IS1002WEB034.stgadegov.ae
IS1002APP126.STGADEGOV.AE
IS1002APP125.stgadegov.ae
IS1002ODB029.stgadegov.ae
IS1002APP111.stgadegov.ae
IS1002APP109.stgadegov.ae
IS1002ODB031.stgadegov.ae
IS1002APP254.stgadegov.ae
IS1002APP125.stgadegov.ae
IS1002APP112.stgadegov.ae
IS1002APP126.STGADEGOV.AE
IS1002APP130.stgadegov.ae
IS1002APP126.STGADEGOV.AE
IS1002APP133.stgadegov.ae
IS1002APP127.stgadegov.ae
IS1002APP105.stgadegov.ae
IS1002APP132.stgadegov.ae
IS1002APP110.stgadegov.ae
IS1002APP134.stgadegov.ae
IS1002ODB034.stgadegov.ae
IS1002APP125.stgadegov.ae
IS1002APP125.stgadegov.ae
IS1002ODB028.stgadegov.ae
IS1002ODB033.stgadegov.ae
IS1002ODB028.stgadegov.ae
IS1002APP108.stgadegov.ae
IS1002ODB030.stgadegov.ae
IS1002ODB034.stgadegov.ae
IS1002WEB032.stgadegov.ae
IS1002APP128.stgadegov.ae
IS1002WEB033.stgadegov.ae
IS1002ODB032.stgadegov.ae
IS1002APP127.stgadegov.ae
IS1002APP126.STGADEGOV.AE
IS1002ODB030.stgadegov.ae
IS1002ODB029.stgadegov.ae
IS1002APP125.stgadegov.ae
IS1002APP253.stgadegov.ae
IS1002ODB031.stgadegov.ae
IS1002APP255.stgadegov.ae
IS1002ODB033.stgadegov.ae
IS1002APP129.STGADEGOV.AE
IS1002APP129.STGADEGOV.AE
IS1002APP107.stgadegov.ae
IS1002APP131.stgadegov.ae
IS1002APP106.stgadegov.ae
IS1002APP133.stgadegov.ae
IS1002APP132.stgadegov.ae
IS1002ODB032.stgadegov.ae
IS1002APP128.stgadegov.ae
IS1002APP120.stgadegov.ae
IS1002APP126.STGADEGOV.AE
IS1002APP127.stgadegov.ae

Certificate

The complete raw certificate details for c1sdidwapp004.stgadegov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96oK3OaF08+AvBaf9iBc
/qfF9dI1qUkYduWdeB5K0q4v12OZLtHGqxK5IYvdq4ZJcrhmniWpZb0wM647yWeL
eFApGUdSH+2bop6ATUx5qeux6nr3LEBjL2UdemahWxGav5lW66Io8/MBBRywBrdx
9KtVBuy5YO5sA1oqPQxPqJNE9q0A0jfvxvfBIhV3ugYlSEkgwCZSEBz6sQMRoz7S
2I/9hdbjFziACwHL1yCuWf9VE0+Zm6EHpxWZ8eLWhIEkxxUvWY2AUL/7S11/9KLv
Na1wtI/4M98DxKGMz9fuBdfJaFzzw1/8cjOs3S6K4Hfm5d4dUyXG7skdz18+CuwG
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16154644265345826066660080707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 13:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-29 13:16:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Government Enablement'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c1sdidwapp004.stgadegov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31264712375585883917987242065971481597692841760465118099829049634680906275655286152972804790730445556136552339085532063573303776490472104686205428930054950659222754038473922647770411093417780058480015639386684028445008910735054823109690355938005061244744708856343366442862498172365996303121691873272349730730190842032710019502100924651946796612479168925399221554567675355740996377377201535314416912139264392609774037787456995104109220365241294879073041554781865346181701657023762729206198694885494482335364327326663667963386151806137317519404902418066476734574176207545338213969641584864876248541393878774449737303593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c1sdidwapp004.stgadegov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1sdidwapp004.stgadegov.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06fb6a1128f32a118ff383ef91c20396d52cad78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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