*.rlc.sandcats.io

- Sandstorm Development Group Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 52:b4:1a:e0:72:08:19:1d:3b:07:f7:68 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandstorm Development Group Inc.

Organization: Sandstorm Development Group Inc.
State / Province: California
Locality: Palo Alto
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 52:b4:1a:e0:72:08:19:1d:3b:07:f7:68
Serial Number (int): 25595504374697001142066870120
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9c:46:b8:f4:83:5f:70:ee:99:53:c0:a5:73:73:b1:87:54:29:b4:dc
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5b:b3:5a:f2:7c:8a:29:e7:2c:83:b3:03:0d:df:11:b1:66:bc:a5:d0
Fingerprint (sha256): 08:32:06:24:a9:70:9b:b4:20:e8:f1:83:d1:e9:fd:4e:be:7b:a5:ca:4e:19:5d:ab:8f:c4:e8:7e:73:9a:2b:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.rlc.sandcats.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rlc.sandcats.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rlc.sandcats.io
rlc.sandcats.io

Other certificates including the domain name rlc.sandcats.io

(limited to 100 certificates)
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io
*.rlc.sandcats.io

Certificate

The complete raw certificate details for *.rlc.sandcats.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7CGb8PDHjQZpU0p1yG
Wf3CwSnfNADnWs3ShGd5Y9zr5aNSH3gbZHWytj4i5jHxMvK28bS431GPk4P2wMSc
16CXR5jWOYnHDy2+A9vXWPEBPkMJy+tIDsse1b02szjrXmVij+xttK6VrSRF0jmj
dF75Bi29infNcaNDphNhNrLeVZg/YVvGXzPlQi+ZHV6bUAcd07cnkFLc64H5LsUD
gVOsN5rc8s3TlF55MHMLiSx0sUibafz8snntwQcM0CH3wSilUT2W38eyigNVqYU5
cjS/UBrTLm4czdGzqQ7DlEmr2qYz1pcPOsNsFAmrg708F3MHZIjYTcyNAGC8yydp
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25595504374697001142066870120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 08:25:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 07:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandstorm Development Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rlc.sandcats.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21523018644952222933825693567118954492477589614762123109609385268272261799112297119642084200255450815995537572627171163952838282114064950921623329780506797660565187112536048645005415436969261242362377018972227974435676083783105917214172705928542473700095720398034788627144887738232012723925403157142737130035980615530038619570880469372207056128060227384535729639158837388606376915525934916254314089448902011666698117048775337026683332209065632233207531259436914386564632342895232793920860654812721559058781878568295511872707008938473585577895802059248679960203998238652271440358840133509638061821362423290271332002173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlc.sandcats.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlc.sandcats.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c46b8f4835f70ee9953c0a57373b1875429b4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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