*.test.hostelworld.com

- Hostelworld.com Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7d:1a:4a:2b:2c:1e:26:c6:b1:b5:c3:81 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hostelworld.com Limited

Organization: Hostelworld.com Limited
State / Province: Dublin
Locality: Dublin
Country: IE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:1a:4a:2b:2c:1e:26:c6:b1:b5:c3:81
Serial Number (int): 38717408550486862494193533825
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: aa:86:2c:b8:da:c5:5e:04:46:11:43:ed:63:3a:91:bc:22:23:19:63
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 3b:51:3f:9b:15:6b:e5:b3:ef:5a:03:79:bc:50:f5:e1:38:5e:80:86
Fingerprint (sha256): 0b:72:6c:1c:c1:f4:c8:3e:6b:c4:75:77:05:23:78:17:da:3f:64:7a:88:07:8f:92:92:3e:cb:56:3b:ea:7f:4e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.test.hostelworld.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.hostelworld.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.hostelworld.com
test.hostelworld.com

Other certificates including the domain name hostelworld.com

(limited to 100 certificates)
www.hostelworld.com
reconciliation.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
s6.ct.cartrawler.com
s6.ct.cartrawler.com
www.hostelworld.com
*.test.hostelworld.com
s6.ct.cartrawler.com
m.hostelworld.com
tsecure.hostelworld.com
m.hostelworld.com
s6.ct.cartrawler.com
www.hostelworld.com
staging.hostelworld.com
m.hostelworld.com
tsecure.hostelworld.com.staging.hostelworld.com
sstats.hostelworld.com
filetransfer.hostelworld.com
mail.hostelworld.com
signup.hostelworld.com
hostelworld.com
m.hostelworld.com
www.hostelworld.com
inbox.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
hostelworld.com
sstats.hostelworld.com
hostelworld.com
s6.ct.cartrawler.com
s6.ct.cartrawler.com
hostelworld.com
tsecure.hostelworld.com
www.hostelworld.com
tsecure.hostelworld.com
tsecure.hostelworld.com.staging.hostelworld.com
www.hostelworld.com
www.hostelworld.com
www.hostelworld.com
*.dev.internal.hostelworld.com
vsecure.hostelworld.com
s6.ct.cartrawler.com
tls.automattic.com
www.hostelworld.com
www.hostelworld.com
www.hostelworld.com
www.hostelworld.com
www.hostelworld.com
vsecure.hostelworld.com
www.german.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
hostelworld.com
www.hostelworld.com
www.hostelworld.com
hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
www.hostelworld.com
s6.ct.cartrawler.com
signup.hostelworld.com
www.hostelworld.com.staging.hostelworld.com
www.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
tls.automattic.com
vsecure.hostelworld.com
tls.automattic.com
hostelworld.com
hostelworld.com
secure.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
s6.ct.cartrawler.com
secure.hostelworld.com
sstats.hostelworld.com
www.hostelworld.com
hostelworld.com
www.hostelworld.com.staging.hostelworld.com
www.hostelworld.com.staging.hostelworld.com
www.hostelworld.com
www.hostelworld.com.staging.hostelworld.com
s6.ct.cartrawler.com
www.hostelworld.com
sstats.hostelworld.com
s6.ct.cartrawler.com
inbox.hostelworld.com
s6.ct.cartrawler.com
vsecure.hostelworld.com
www.hostelworld.com.staging.hostelworld.com
www.hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
www.hostelworld.com
hostelworld.com
www.hostelworld.com
s6.ct.cartrawler.com
www.hostelworld.com
www.hostelworld.com

Certificate

The complete raw certificate details for *.test.hostelworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGHLvmabMCyt4ewSrCa7
xevpJret1srj4TXZIu/FCS8ipOadi+MZOjp8NVQxOA0ykepjs1ctiwpC1LzI8RXB
cCyxiUd9IP3v4wfi9treaM7Id773kEtsfLrfryPjS7fgNBUNWIOS4oU0hkn4v+Xg
qbvQAdXG64VDmnPWGDR7KLTzVnGyWvK6/TRs8Eq0G3aD134Q5HkluedeAIx+JdH7
U0ALyBWAECMCjgBQ7Lo/EsDrVYw1hEkrCA6BqZpWs+HNd0cak9Xe18zFxPQtRb0o
zO63HgkwKbJ3AropCJoPW2QqnqDVFBTRZfkiKhYhC/jhcXW01lm3gorcj3pjDHbL
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38717408550486862494193533825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 18:11:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-24 18:11:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hostelworld.com Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.hostelworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25295885936066976451758130694767401675295266379998546081317886514532790084868294809161439459442782603929039420747143029784421197868248817874943030800333842522312009284360462042659705057650333907463525953492010030566744449720257340334265035336764992347561616482189743454611807777961511626917351285580013727342536424031607950186454092855236697941439188589413768691274254754718997717997732300373551662335222051821307509577976177771020886419952685542164144221021108804294581361136357460222850719558903577283415354940631913421260381163240751968996954664660504299539111517754476060655350135495748997470930175685966150683637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.hostelworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hostelworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa862cb8dac55e04461143ed633a91bc22231963
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007df7f550fe34bbcc6d2495b4fb88e14bd32c09446d6155a92d45253c4c5b064b33112d4b960a14b1807c18d7f8d1714099b0389d1760d3742cbf559a01588d9397b60f8efdb1a0b2a261a4c71ac8feb087838367dd5ab5c49f20845557a762054e509c18f0a0f8d16f76855b726c6f0e7216021ed76a45f3d5f995fbf84eae036f6f725b2a2d408ec8225fb95a8df4cfc8045eaf306deff0ea0345774528cef92ddcfa13c231e9cf66059f6375b4528a0b7df8c8a33b2a5b0f98e943e0d7036ed5a093863c96c31be3b1d5751fea5496f68ea72880de48e2bb546938f4807ac476a21f75fd93678eb884dc4597d81dbbd64e975de2b24bc0780d354dbb45eb38