helan.fes526-ref.m-team.be

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:09:71:80:c0:48:b6:44:4c:eb:0e:dc:ab:d5:be:31 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=helan.fes526-ref.m-team.be

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:09:71:80:c0:48:b6:44:4c:eb:0e:dc:ab:d5:be:31
Serial Number (int): 9353628755220264298908067792709598769
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 54:50:5a:5a:b9:a5:45:a9:ee:c0:44:9a:88:e0:3d:f4:6a:ec:74:2b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): aa:90:71:fd:2e:99:a6:52:12:69:cf:74:30:a0:b8:a8:6a:93:db:92
Fingerprint (sha256): 0b:a7:80:a0:68:2b:a0:7f:a0:f1:3b:6c:f3:98:50:d7:8b:97:10:91:4b:93:85:df:4d:d9:cf:74:2d:10:b0:b3

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate helan.fes526-ref.m-team.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helan.fes526-ref.m-team.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helan.fes526-ref.m-team.be

Other certificates including the domain name m-team.be

(limited to 100 certificates)
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
oobbackup.m-team.be
helan.fes526-ref.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mllm.fes400.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
fes400-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
access.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
mloz.fes500-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
bcmnotifications-mllm.m-team.be
mloz.fes500.m-team.be
api-mloz-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
api-mloz.ref-genesys.m-team.be
api-mllm-ref.m-team.be
mnnz.fes200.m-team.be
sni.cloudflaressl.com
fes400.m-team.be
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
openzorg-prod.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
sip.uc.m-team.be
fes400-integ.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
api-mloz.dev-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mloz.m-team.be

Certificate

The complete raw certificate details for helan.fes526-ref.m-team.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzt5jXfnUXIFChF6QROI
7BOHgppu33g17IDew00y/1Egjs8ZrUot7OWkG2DhQ5abK5RDDLcBnsBSGXFN8dSn
hW+YMNF6+yd/I6AtHhlmQ01hjBkuuMvcor0MaLS9IH08uJ/IekLmUzrYCltIAweI
zDeBGUUAFXKfNCIAuj24+vashZYQI4dEtZX1FAOI07T4BqI9FBmjN2+3qUOeHvKd
U2EleZS06KgE9wFU8seIJESExU4fDKjDnUBOXoSx0iSPEV6pHFk0CUR3iH1/bH92
78AtPDkJMgcOcMOuxX7Y5D/pFle8SpUznHeTjXmaWjX1/oLv4utGwmcd4+7ulk0/
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9353628755220264298908067792709598769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helan.fes526-ref.m-team.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26160657252268616831394914415302493394464091131194259123270917422117543735837261086067255960371096324381049249435396336777418830676801791884971065829659148014968431275593185944645688642067822899341326827620134426871829619891818035545017228060040835329826135786773499877878136814860728788637992508202500765170941868931170672631346266054367675515362625095853080100877290498249225756166175669966562893060722824623590643615506672357971153148819506810132095796577361987005142373091257757623433033036040533808329625629214115194746554126605649373905642905924172724846672894729372328324137937722257249768247979486615780015973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54505a5ab9a545a9eec0449a88e03df46aec742b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helan.fes526-ref.m-team.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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