opskrifter.coop.dk

- Coop Danmark A/S -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6c:07:ac:ff:fd:68:99:8f:77:b9:a4:72 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coop Danmark A/S

Organization: Coop Danmark A/S
Organization unit: Technology
State / Province: Albertslund
Locality: Albertslund
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:07:ac:ff:fd:68:99:8f:77:b9:a4:72
Serial Number (int): 33433660510657375732053419122
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a4:40:2b:0a:62:d0:e2:14:8f:8b:e4:6f:a2:d7:e9:35:75:f1:df:84
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 75:c2:47:e6:7c:c4:9d:a2:39:84:35:f7:b5:0d:08:4f:f4:c7:a4:b9
Fingerprint (sha256): 0c:dc:ee:44:db:c7:32:11:e5:13:bd:95:88:56:fe:32:ea:c1:4f:20:c9:b6:b3:d1:e5:89:61:64:aa:5c:89:6e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate opskrifter.coop.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opskrifter.coop.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opskrifter.coop.dk
www.opskrifter.coop.dk

Other certificates including the domain name coop.dk

(limited to 100 certificates)
anglemark.dk
www.bufras.club
4rex.app
superbrugsen.coop.dk
fs3.net.coop.dk
cloudinary2.map.fastly.net
akamai-san17.exacttarget.com
savannah.coop.dk
icebear.app
guestnet.coop.dk
cloudinary2.map.fastly.net
mad.pre.coop.dk
cloudinary2.map.fastly.net
savannah.coop.dk
cloudinary2.map.fastly.net
redirect.coop.dk
www.elev.coop.dk
akamai-san17.exacttarget.com
developer.cl.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
redirect.coop.dk
cloudinary2.map.fastly.net
voucher.acs.coop.dk
cloudinary2.map.fastly.net
paymentcard-stage.cps.coop.dk
stamp.acs.coop.dk
testportal.coop.dk
*.net.coop.dk
testdummy.coop.dk
tilmeld.coop.dk
cloudinary2.map.fastly.net
opskrifter.coop.dk
*.cl.coop.dk
opskrifter.coop.dk
letsvoo.com
redirect.net.coop.dk
cloudinary2.map.fastly.net
devtilmeld.coop.dk
s4-san.cloudinary.com
akamai-san17.exacttarget.com
cloudinary2.map.fastly.net
cusk.coop.dk
receipt.pre.acs.coop.dk
cloudinary2.map.fastly.net
indkobsliste.coop.dk
apidemo.cl.coop.dk
*.tst.coop.dk
cloudinary2.map.fastly.net
lyncdiscover.mad.coop.dk
devtilmeld.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
adm.mad.coop.dk
cdkwebmail.coop.dk
sts01.tst.coop.dk
ansvarlighed.coop.dk
voucher.tst.cl.coop.dk
coop365.coop.dk
savannah.coop.dk
cloudinary2.map.fastly.net
opskrifteradmin.coop.dk
s4-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s4-san.cloudinary.com
prdmedlem.coop.dk
forening.coop.dk
bonus-calculation.tst.acs.coop.dk
fakta.coop.dk
adm.mad.pre.coop.dk
cardpaymentproxy.acs.coop.dk
partner-tst.cps.coop.dk
voucher.pre.acs.coop.dk
guestnet.coop.dk
click.marketing.mad.coop.dk
elev.coop.dk
kampagner.coop.dk
brand.coop.dk
*.coop.dk
dash.coop.dk
email.shopping.coop.dk
view.marketing.mad.coop.dk
cloudinary2.map.fastly.net
cloud.marketing.mad.coop.dk
opskrifter.coop.dk
cloudinary2.map.fastly.net
tilmeld.coop.dk
receiptsearch.acs.coop.dk
partner.cps.coop.dk
www.elev.coop.dk
rest.mad.coop.dk
akamai-san17.exacttarget.com
autonum.app
cloudinary2.map.fastly.net
devtilmeld.coop.dk
adfs-token.net.coop.dk
cloudinary2.map.fastly.net
api.cl.coop.dk
md-grive.com
*.pre.cl.coop.dk

Certificate

The complete raw certificate details for opskrifter.coop.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2GaFR+Ectw55lCBUAAw
Wj3b/Z370s/PLLUZjvLNQzxJUmy++aO0oqk2W7nw+RWEJpKZDOU5X8f0z2vIRxDp
7DeZ+17+9X49I0AQbcH35ke5gKwZFviVu3ldLe+E2/J6avWGzBZCB0L4q6LY/KKQ
z8L0AIG+SwNgEbrLrbL6LrDwm+p2/9NwvotrrT4rs1JzaI1sS9R7qZaxfJ0ULwq+
9oloxcpbdw9Ug3o3Y2fvmw3atY505K2CYoJILgDO3wZBrIM6eN9D/2/XEAY5b5ml
UPoggoP6rcjDkevztIKBaB2zZUJYfn1z//ohbcWyNmCiv5Xszyjm3fm6cd2TtpAp
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33433660510657375732053419122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 11:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 11:46:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertslund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertslund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop Danmark A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opskrifter.coop.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22139832652264574754561606238332616992687577894547128010541172460849973569662101198461118866460487681222517253246721372651865544781003554888964871218559053440535306653831722302403929901873078454343196165209280188725621135521089161278291633043898410512688165935345257317861758444865532647433818320379964075690277586498895344475188511360951773035028790173075104464691010305939548932042758942511563148651737449389241333532360121276066665894779842531877092300827808699601203382489152211763772786773915424766958398809443898858043459064687669084947805624098227803787919730084977128573335244482755609581081850015640840055259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opskrifter.coop.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opskrifter.coop.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4402b0a62d0e2148f8be46fa2d7e93575f1df84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dde8bc8ac00000403004830460221009ac01b660c71266e821a4752d9f89b208c4438f648e62a781112cd54c18c00ff022100a4ca5d1e8c17b6d706ffabc1bf38c947ca33d86ccedf921a14243d101b5930010076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016dde8bc8d400000403004730450221009c9f30d9df1f79de9c28170738404f373de19a9f58c1e37f02ad48da490a159c02201a2b6e6d082df465728e9c2a4708147b9acc96895dc7e33f65cd0b98ffaf1090007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000016dde8bc8ad000004030046304402204d52492d250f22c21ddc7492acd5f487ab48a3911fbaf06f5e049628cdb8c0c90220350a605a15e9bc89cd2932b04181c903f254847883f5e413ce1feea8f381019b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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