www.fanmio.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3b:28:44:4e:3e:07:a7:6b:29:76:6c:b3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fanmio.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:28:44:4e:3e:07:a7:6b:29:76:6c:b3
Serial Number (int): 18308295176480542340857359539
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f6:d8:bc:f1:0b:c9:73:39:21:c7:c6:bd:6b:2a:78:72:d8:35:e5:2a
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 0b:d5:48:92:5b:c5:08:4f:b2:10:cb:39:f2:8c:c7:27:50:de:11:b6
Fingerprint (sha256): 0c:d3:98:32:44:9a:6d:2a:1b:e5:63:e0:85:c0:6b:d9:d1:fd:86:85:87:c6:dc:12:cf:e1:7e:5a:c4:bf:f4:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate www.fanmio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fanmio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fanmio.com

Other certificates including the domain name fanmio.com

(limited to 100 certificates)
dev-shop-8v55ra.fanmio.com
fanmio.com
fanmio-web-issues-cpix.run.fanmio.com
aus.icpa.dev
dev.app.seodity.com
fanmio.com
help.fanmio.com
test-shop-f298hf2.fanmio.com
tnlvsncorp.danno.nz
www.omnom.xyz
admin-fix-high-priority-issues.run.fanmio.com
fanmio.com
bendesk.de
ao-mobile-ut-analytics.amtrustfinancial.com
staging-8v55ra.fanmio.com
www.zbang.agency
egemas-lawyer.bingkaimedia.com
app.teambuzz.io
fanmio-web-issues-zip-code-validation.run.fanmio.com
apnaconsult.com
staging-a3ymg5.fanmio.com
www.fanmio.com
admin-fix-session-duration.run.fanmio.com
alia-admin-web.reaktor.ae
pulsomusic.com
fanmio.com
test-shop-f298hf2.fanmio.com
fresh.bestnotes.com
fanmio.com
dev-a3ymg5.fanmio.com
fanmio-web-feature-klarna.run.fanmio.com
www.stg.burnian.com
blackboard.agency
my.campeasy.com
fanmio-web-features-alarm-dashboard.run.fanmio.com
app.fanmio.com
help.fanmio.com
justice.is
admin-develop.run.fanmio.com
www.biletofisi.com
staging-shop-dx381fof48.fanmio.com
dev-shop-8v55ra.fanmio.com
www.fanmio.com
identity.elita.si
arsfeld.com
www.aubscenity.com
test-f298hf2.fanmio.com
fanmio-web-fix-session-fixes.run.fanmio.com
test-shop-f298hf2.fanmio.com
fanmio-web-issues-fix-chrome-browser.run.fanmio.com
fanmio-web-mbutan-patch-1.run.fanmio.com
tnmop.in
fanmio-web-feature-peek-to-screen.run.fanmio.com
www.hosteljoinville.com.br
staging-shop-dx381fof48.fanmio.com
fanmio-native-graphql-github-actions-test.run.fanmio.com
m.toktik.co
app.youareaceo.com
cabyhufntb-shop-production.fanmio.com
dev-shop-8v55ra.fanmio.com
unmodified.info
fanmio.com
*.test.fanmio.com
fanmio-web-feature-new-order-webhook-2.run.fanmio.com
fanmio.com
fanmio-native-graphql-master.run.fanmio.com
test-shop-f298hf2.fanmio.com
www.fanmio.com
fanmio-web-issues-3849-sharing-run-domain.run.fanmio.com
dev.conversell.ai
www.jasoni.com
help.fanmio.com
ethnicbridalstudio.com
www.itranslate.com
staging-dx381fof49.fanmio.com
staging-shop-dx381fof49.fanmio.com
fanmio.com
fanmio-web-issues-video-player.run.fanmio.com
fanmio-web-feature-product-page-validation.run.fanmio.com
app.powtorkazpolskiego.pl
fanmio-web-features-casting.run.fanmio.com
admin-issues-aws-vod.run.fanmio.com
beltur.orwi.app
test-shop-f298hf2.fanmio.com
dev-shop-8v55ra.fanmio.com
www.fanmio.com
www.brareytv.com
api-dev.sokontokoro-factory.net
staging-shop-8v55ra.fanmio.com
fanmio-native-graphql-issues-ably-optimization.run.fanmio.com
fanmio-web-develop.run.fanmio.com
floerenaap.be
cabyhufntb-shop-production.fanmio.com
www.charaplus.com
fanmio-web-feature-fight.run.fanmio.com
www.churchzeit.com
dev-shop-8v55ra.fanmio.com
dashboard.dev.finstart.co
fanmio-web-develop.run.fanmio.com
www.hagel.app

Certificate

The complete raw certificate details for www.fanmio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dqSwGvOZ2D4sOXSXgWv
e8b/VxnRWelVtpgYJC9cdazCAgPjBBzoPe4h/R58khExrVC+BsxYCf6xg+5h8a5f
YWKzcHYTNsREY/1ZrgkBKHaFggSaoVxfS1n6yRZrVtuJEeQfo3fPxpJnlr1BG+sB
I+LZM3hZvIr7veuigkLbAZkv51sRaCBBb+NsVIChSuPUTa6+Re3luBdXlQb9E64O
oM7+BSHAjq2MNPAgq8MqicdXffS86HNVv0hhEREVyTvMvLqIk/IlnsjkDyhzCauF
ZuWJumFQgQ+DSBNsExKWZH/VbhEVBQ5LrG5XBCPpNig0MczzKWUg6XGeCTxx5IWr
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18308295176480542340857359539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 05:58:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 05:58:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fanmio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28511401103362651433091289646842772292307157803545957754550373556724395777979375344544321739600580623086150954242048769042967285814107891131933534864974635413674610430632203022829076976831108609774861209174839288218782726753398747636529274794357124451851661856184872710997085325746206156451334542305535291849259045415477358931232193690763147065127061373563554013353668680728727279392726280573177684740559891555302218121813518369623849299678094692189765081000845245195498091373970389671572899404657540682708245993310203243647611902692508115490756918725451752292646703521039002449467559593328459677168841925779440118601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanmio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6d8bcf10bc9733921c7c6bd6b2a7872d835e52a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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