jftc.nato.int

- NATO -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 78:cb:6c:75:68:3b:ae:aa:09:0e:d4:b2 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NATO

Organization: NATO
State / Province: Brussels
Locality: Brussels
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 78:cb:6c:75:68:3b:ae:aa:09:0e:d4:b2
Serial Number (int): 37384125301303173364029772978
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a1:20:09:81:e2:53:48:d0:47:e0:14:f6:bf:1a:0e:d4:54:94:8d:91
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 78:b1:44:f7:00:39:78:2e:5a:c4:bd:f8:6b:c6:e9:49:38:23:27:6e
Fingerprint (sha256): 0d:db:44:69:6b:7b:9d:f6:55:83:83:d3:8d:2e:88:29:64:57:b1:6a:82:ee:00:03:2e:a5:67:6b:d6:13:1d:0b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate jftc.nato.int

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jftc.nato.int

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jftc.nato.int

Other certificates including the domain name nato.int

(limited to 100 certificates)
shared.napma.nato.int
meet.nahema.nato.int
ims.nato.int
npc.ncia.nato.int
www.natoschool.nato.int
*.nc3a.nato.int
www.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
ap.ndc.nato.int
ncia.nato.int
apx.ndc.nato.int
elearning.natoschool.nato.int
*.ncia.nato.int
mail.cmre.nato.int
ndcmail.ndc.nato.int
www.asc.nato.int
awds.ndc.nato.int
mdm.napma.nato.int
mail.hrf.tr.nato.int
verity.hq.nato.int
extranet.napma.nato.int
ism.hq.nato.int
captiveportal.nahema.nato.int
msiac.nato.int
guest.napma.nato.int
gss.ncia.nato.int
servicedesk.thwaites.co.uk
ssc.nato.int
ncio.nato.int
dnbl.ncia.nato.int
acquia-sites.com
coi.nato.int
*.nc3a.nato.int
cmre.nato.int
itsupport.valeosnackfoods.com
www.ncia.nato.int
iocore.ivv.ncia.nato.int
www.nspa.nato.int
dnbl.ncia.nato.int
shared.napma.nato.int
awacs.nato.int
*.nacc.nato.int
*.ims.nato.int
redirect.napma.nato.int
nexus.dev.nato.int
acquia-sites.com
iocore-cwix.ivv.ncia.nato.int
*.nciss.nato.int
*.reach.nato.int
acquia-sites.com
emm.hq.nato.int
lldb.jallc.nato.int
apx.ndc.nato.int
ndccds.ndc.nato.int
apy.ndc.nato.int
www.ssc.nato.int
guest.napma.nato.int
sts.reach.nato.int
meet.nahema.nato.int
NSOVPN.natoschool.nato.int
ndccds.ndc.nato.int
skypeaccess.shape.nato.int
labs.academy.ncia.nato.int
shared.napma.nato.int
dev.nato.int
www.ssc.nato.int
amdc2-iss.ncia.nato.int
mail.cmre.nato.int
e-isaf.act.nato.int
*.nshq.nato.int
mdm.napma.nato.int
servicedesk.usspeaking.com
webmail.pia.nato.int
acquia-sites.com
diana.nato.int
jftc.nato.int
ticketing.alphamead.com
selfservice.act.nato.int
verity.hq.nato.int
acquia-sites.com
gp.csp.nato.int
mobile.pan.nato.int
meet.nahema.nato.int
redirect.napma.nato.int
acquia-sites.com
napma.nato.int
msiac.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
guest.napma.nato.int
webmail.cmre.nato.int
haivision.hq.nato.int
*.ndss.nato.int
ssc.nato.int
www.msiac.nato.int
ithelpdesk.dccoilireland.com
servicedesk.thwaites.co.uk
eportal.nspa.nato.int
www.nspa.nato.int

Certificate

The complete raw certificate details for jftc.nato.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37384125301303173364029772978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 07:41:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 07:41:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NATO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jftc.nato.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817160751787629094066694743891483890082483135046597651074360282520080002501005011271058983900271899823263414160160040707674056278677339994896572443383341725428097836125915157553190199328932362893540615188423636403461899781566805905699008634300582296963403145057848238110421155154809915563329897761436573167473614173979307052331895118858477314298799932595132157600139137724452611231298963868412471791983547581533018202800390340079328483982979831671547893164732103800366476894786342442848552166127561433941989004479797934168420354981483843050784896013119813226080304358717318619409275034194811615064038110181220760483307208512807794827889898400230642465947707387082966707827353440003715505570804448145330014807424056761977461015025271746084479187621332334736677739481739627855016824402392443952614533090109940774993400437444917732209544874873174317886788779481172102735220188681410176233999995931449308403823624066868302098104928859146708918163408618780388628949851770563385795514511163095725644443595502719071803532612332063148436694816034517250072013292569311994888804318425414920267593040919738153793636570084628769257834652176328588654614161531548895400010183635825490532927125819201488219509631879541447412007258658850803489280489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jftc.nato.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1200981e25348d047e014f6bf1a0ed454948d91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e9c772b41b4ba82daea28e406761ace7403a15ab83b8972815d26f10187736deb431e0b212cef12f209ee4534beed1503762239fa3abb68a34c3a474c05e628792de246ad0ae868336e19fbc4e6a2455490e9613587717ad3cdf941da8b07ef3e596ccf1e3ff5530a3503a9a56d8e4b4369d1b58a17ba878791f823b25338dc41d698f5279644df4a0ea4b6c075e42e206fbbb25591c83cd6d0a26f77cdc7ad62968d125575246666d9f69ed44431e08e3648b9e31949e266e0f1cd1cbe0339fbc610a223a8fc41257c7463fa508b7f364c530528f4948f3e545bdf491de687aaac4fb0a1296f194619d95d812eba45986282f5faaefbd76a91e0d2488c9300