fs1.sts.epo.org

- European Patent Office -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 22:3d:4f:d8:c0:0b:c2:90:47:94:30:b2 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

European Patent Office

Organization: European Patent Office
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:3d:4f:d8:c0:0b:c2:90:47:94:30:b2
Serial Number (int): 10596611874209459544492617906
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 3e:b9:0b:e7:31:a8:fb:31:63:d2:ab:98:07:2e:64:d3:24:cd:f7:56
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fd:d2:07:53:e0:bd:c8:40:b8:e0:a4:24:50:58:a7:a6:66:42:65:d6
Fingerprint (sha256): 0c:26:88:df:47:d4:02:04:fd:b3:81:98:c1:e5:d0:25:36:44:3c:bd:51:62:0a:f5:76:c1:bc:ce:20:28:ce:39

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate fs1.sts.epo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs1.sts.epo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs1.sts.epo.org

Other certificates including the domain name epo.org

(limited to 100 certificates)
register.epo.org
hybrisapp-i.internal.epo.org
umprest-p.internal.epo.org
vhepop02ci.hec.epo.org
pthw-mn.epo.org
advanced-search-services.internal.epo.org
register.epo.org
gvw209.internal.epo.org
epomail.rsrc1.epo.org
vault-d.internal.epo.org
wmail02.epo.org
data.epo.org
ci.internal.epo.org
elk-p.internal.epo.org
ops-o.epo.org
besba01.rsrc1.epo.org
tools.epo.org
gvw049.dev1.test.epo.org
containerhub.internal.epo.org
ops.epo.org
umprest.epo.org
wcm.cooperativepatentclassification-d.internal.epo.org
gvw633.dev1.test.epo.org
nationaloffices.epo.org
GVW295.RSRC1.EPO.ORG
documents.epo.org
epoqueac.gpfs-prod.internal.epo.org
sapprodwd1.internal.epo.org
cmgprod01.epo.org
mvcsc01.internal.epo.org
gvmail03.epo.org
besba01.rsrc1.epo.org
register.epo.org
*.nautilus.internal.epo.org
translationportal-o.epo.org
sapprodcs1.internal.epo.org
mnw084.rsrc1.epo.org
tas-d.internal.epo.org
register-no-apigee.epo.org
gshahmp03.internal.epo.org
MNW352.dev3.test.epo.org
epo-appsentry.epo.org
webserv.epo.org
VDI.INTERNAL.EPO.ORG
GVW1119.INTERNAL.EPO.ORG
gvw438.dev3.test.epo.org
fileaccess.internal.epo.org
nationaloffices-o.epo.org
gshahmp02.internal.epo.org
blog.epo.org
gspstn01.rsrc1.epo.org
jira-o.internal.epo.org
remote.epo.org
ops.epo.org
hpa-mn.internal.epo.org
opd.epo.org
developers.epo.org
gvw697.rsrc1.epo.org
register-o.epo.org
vhepot02ci.hec.epo.org
data.epo.org
hybrisdh-d.internal.epo.org
mnw286.rsrc1.epo.org
register.epo.org
MIMDEV.DEV1.TEST.EPO.ORG
GVW1119.internal.epo.org
tcloudex.test.epo.org
infoclient-i-new.internal.epo.org
pensioners.epo.org
GVW1043.dev3.test.epo.org
haithhd01.internal.epo.org
medxfer.internal.epo.org
api-i.register.epo.org
cvc.epo.org
api.register.epo.org
register-i-no-apigee.epo.org
epoextsa.epo.org
fs1.sts.epo.org
bi4you-int.internal.epo.org
translationgateway.epo.org
admintools.internal.epo.org
*.register.epo.org
gvw566.dmz.epo.org
vhepoh02ci.hec.epo.org
translationportal-o.epo.org
haimnhd01.internal.epo.org
tools.epo.org
forms.epo.org
wcm.trilateral.internal.epo.org
epogateway-o.internal.epo.org
activesynct.epo.org
test.epo.org
saptrain.internal.epo.org
register-i.epo.org
ops-i.epo.org
gvw629.dev1.test.epo.org
mnw231.dmz.epo.org
forms.epo.org
translationportal-i.epo.org
vhepop02ci.hec.epo.org

Certificate

The complete raw certificate details for fs1.sts.epo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm1zIRDyODz2HPq4tl9s
O0xIwMBOwi99CezgoSFz7tY86qcQ0Jc+dYl6UDVKdwWUJgWpq6mZese6TdPZLKNL
rz1sWmqa1Lkxf0cuxhtwoEWw6xf8577jWrFmlR7vNZZRgfXkiwzMdQ+0xeijxcJQ
pR+Nqg37R72Hxxo+Tb87OznibIHACzlwUWOoHsrwUIzGqNBkAZedT5gh4eAP27/6
f4Ji2GAKG75b3dhWaK9/MaC9XrwBQuPZ+ra9G435+euQ+oDxMRojsLFT1CJocLg5
WT+2RW8H5rKaeSqdETVKj4Z3HWxknzdrZVeRh7qKMvYajfcH5nFR743xqCxVOfEX
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10596611874209459544492617906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-30 09:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-01 09:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Patent Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs1.sts.epo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18989717415019769748916737378607593915230621102384156836482490856053494945740662880537137118072611741318101700098769581157086558689454990290835666567877613361417935966641179737048579039719816453022543977528619184779809628754647400441537520980456469666352701323946682101664830647803255729194016272003230751167745216212457536836053580200564187368073762511255864645735454912305092287385853259937023933888050693976898193953761333007978474925606620898041697866880842669561799689419988368059271199078665320946487205398917583718483436315403411210546189032085605367606002483772939232934905360507697464436487284421111309211461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs1.sts.epo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eb90be731a8fb3163d2ab98072e64d324cdf756
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000176188b89820000040300463044022077bfd4f11a851ee057bb8d5215a71bb3aa3d5c4d04fe4e0b79ead4e21d22582d022054189265b935aaacd8810b39c99200d30778c07475227f9605e2d9b76cfcb70000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000176188b87410000040300483046022100a7162e80db3dae4e9e111b4d013f99951f7adf8415c9a598ae2ad5462d7287b1022100b6c1a94a641d8ca85c39cbf191b9b22a127b3f452b66d19c862742ae0c217fd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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