emm.cn.gt.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5a:59:c9:02:9a:4c:ba:b4:ea:18:4f:88 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=emm.cn.gt.com,OU=Domain Control Validated,C=CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:59:c9:02:9a:4c:ba:b4:ea:18:4f:88
Serial Number (int): 27962194525541769994141454216
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 62:60:ec:bf:b6:eb:36:af:2c:92:17:21:f7:e0:9d:a6:3e:a0:da:ea
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): d0:76:db:2e:62:80:9c:b5:9e:df:94:2c:8a:12:e0:be:2b:ce:44:b2
Fingerprint (sha256): 0d:95:0d:1b:ea:a0:75:88:d6:f3:e9:91:71:7e:74:fb:af:d6:40:e3:e8:96:c7:c0:51:f7:20:6d:5c:0d:a9:30

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate emm.cn.gt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emm.cn.gt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emm.cn.gt.com

Other certificates including the domain name gt.com

(limited to 100 certificates)
systemstatus.rrc.ca
gtiocsaccess.gtinet.org
exohybd.ca.gt.com
iemail.gtus.com
status.hpiinc.com
grantthornton.global
access.ca.gt.com
status.sandsiv.com
status.digitary.net
vpn.us.gt.com
status.clearcompany.com
mtpsfbfepool.us.gt.com
mail.grantthornton.gr
trust.airgap.io
*.fr.gt.com
sip.fr.gt.com
mail.grant-thornton.ch
dal-sfb-ae.us.gt.com
statusp.dotdigital.com
sip.grantthornton.es
stg.dotdigitalstatus.com
vpn.us.gt.com
in.gt.com
statuspage.vantage.online
fso365.us.gt.com
mail.grantthornton.gr
mail.in.gt.com
status.sandsiv.com
emm.cn.gt.com
mail.kevane.com
kw.gt.com
systemstatus.rrc.ca
mail.my.gt.com
mail.grant-thornton.ch
fta-edc.gt.com
status.igdn.macrometa.io
status.caroola.com
iemail.gtus.com
access.ca.gt.com
status.sandsiv.com
mail.kevane.com
correo.guyer.com.uy
webmail.ca.gt.com
mail.br.gt.com
exc02.gt.com.vn
status.ssactivewear.com
status.reliancenetwork.com
status.crewbuilder.ca
statuspage.e2open.com
lyncwebcdc.us.gt.com
status.sandsiv.com
caloes-status.ravemobilesafety.com
status.c9cg.com
webmail.fr.gt.com
status.puter.com
mail.co.gt.com
mail.co.gt.com
dal-sfb-ae.us.gt.com
status.ssactivewear.com
grantthornton.global
status-namer-gtassurancetool.gtil.gt.com
mtp-expe01.us.gt.com
sts.us.gt.com
systemstatus.rrc.ca
sni.cloudflaressl.com
status.clearcompany.com
*.pt.gt.com
sip.grantthornton.es
status.crewbuilder.ca
team.gt.com
ldap.au.gt.com
statuspage.e2open.com
grantthornton.global
sbc.hk.gt.com
status.reliancenetwork.com
stg.dotdigitalstatus.com
mail.grantthornton.at
lyncweb.fr.gt.com
iemail.gtus.com
autodiscover.my.gt.com
lync-edge.cloud4you.biz
mail.my.gt.com
status.sabbagradiologos.com
status.platform.creditxpert.com
sni.cloudflaressl.com
sni.cloudflaressl.com
fredhopperstatus.crownpeak.com
partner-status.verify.interac-id.ca
status.fringesecure.com
access.ca.gt.com
status.sandsiv.com
status.clearcompany.com
statusp.dotdigital.com
status-ca-gtassurancetool.gtil.gt.com
status-namer-gtassurancetool.gtil.gt.com
status.daydev.lol
mail.ni.gt.com
emm.cn.gt.com
mail.ie.gt.com
xen.us.gt.com

Certificate

The complete raw certificate details for emm.cn.gt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HbLTUBZKfJUZh1dFkan
2IJjZWTU6R9N6DGG7agkybzlVjPRp/C19RFq9N+TG7mzxqvvomJfTlZNtvHdn7DK
rmY44ua2HHUlog59KfcJcpIIQAhU5lLiV1FPLRONXVCbAnHrKeEZTeHlg/TFI8La
71RBbc0Ou6Jmq+WgLHcuF2PWiBMwQ/Ocg1hiHrpbjWAKN8V/CpJ2K2UMg/aMULdj
T6g7Ja6S3U+QLrvAuHZvtu71+/L9uq15sxpmtzrQvQjZo5fRFrfaHDEw4zVTaKpQ
p/jMcTQjMMP93uUbEr6zH5GUvC7Qh1phMxna0/F65UtsFmfP5Q/BGlICMmUlvu4f
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27962194525541769994141454216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 10:59:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 10:59:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'emm.cn.gt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27831006669961920223301402494358411890906568952081317071688995693983882790552074803611763213351330126789414607579136073450342875454866854836052347871534188811970294393960795440205961723589676337645619483337601157611073716961846795630089655512075773616463544384939154357418220982404904026293410060878941799939483430991071116345768699417859775250238911898522628879295755210363506099451009794446911359744719825191284435309761451593336732369305605036647306139252293480781592011747159069104338840417154617455317663602992391323150879429738328532125997567111773447528922691038831226385666226606906204359764022010170366107617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emm.cn.gt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6260ecbfb6eb36af2c921721f7e09da63ea0daea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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