mnw231.dmz.epo.org

- European Patent Office -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4a:19:ae:3b:55:b5:1e:fa:b5:65:88:39 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Patent Office

Organization: European Patent Office
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:19:ae:3b:55:b5:1e:fa:b5:65:88:39
Serial Number (int): 22932936658571697008274671673
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 77:f3:3f:ff:25:a2:a3:aa:30:21:95:44:86:9b:b2:81:9c:4b:43:60
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 89:03:06:97:ca:e3:4f:f9:8f:28:22:0c:96:2b:40:1b:61:7a:9f:13
Fingerprint (sha256): 0e:32:9b:61:0f:fe:d6:47:45:29:9c:fa:76:77:35:0a:cc:98:45:13:c8:1c:f7:4e:f7:d0:e0:cb:c2:3d:55:c5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate mnw231.dmz.epo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mnw231.dmz.epo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mnw231.dmz.epo.org

Other certificates including the domain name epo.org

(limited to 100 certificates)
register.epo.org
hybrisapp-i.internal.epo.org
umprest-p.internal.epo.org
vhepop02ci.hec.epo.org
pthw-mn.epo.org
advanced-search-services.internal.epo.org
register.epo.org
gvw209.internal.epo.org
epomail.rsrc1.epo.org
vault-d.internal.epo.org
wmail02.epo.org
data.epo.org
ci.internal.epo.org
elk-p.internal.epo.org
ops-o.epo.org
besba01.rsrc1.epo.org
tools.epo.org
gvw049.dev1.test.epo.org
containerhub.internal.epo.org
ops.epo.org
umprest.epo.org
wcm.cooperativepatentclassification-d.internal.epo.org
gvw633.dev1.test.epo.org
nationaloffices.epo.org
GVW295.RSRC1.EPO.ORG
documents.epo.org
epoqueac.gpfs-prod.internal.epo.org
sapprodwd1.internal.epo.org
cmgprod01.epo.org
mvcsc01.internal.epo.org
gvmail03.epo.org
besba01.rsrc1.epo.org
register.epo.org
*.nautilus.internal.epo.org
translationportal-o.epo.org
sapprodcs1.internal.epo.org
mnw084.rsrc1.epo.org
tas-d.internal.epo.org
register-no-apigee.epo.org
gshahmp03.internal.epo.org
MNW352.dev3.test.epo.org
epo-appsentry.epo.org
webserv.epo.org
VDI.INTERNAL.EPO.ORG
GVW1119.INTERNAL.EPO.ORG
gvw438.dev3.test.epo.org
fileaccess.internal.epo.org
nationaloffices-o.epo.org
gshahmp02.internal.epo.org
blog.epo.org
gspstn01.rsrc1.epo.org
jira-o.internal.epo.org
remote.epo.org
ops.epo.org
hpa-mn.internal.epo.org
opd.epo.org
developers.epo.org
gvw697.rsrc1.epo.org
register-o.epo.org
vhepot02ci.hec.epo.org
data.epo.org
hybrisdh-d.internal.epo.org
mnw286.rsrc1.epo.org
register.epo.org
MIMDEV.DEV1.TEST.EPO.ORG
GVW1119.internal.epo.org
tcloudex.test.epo.org
infoclient-i-new.internal.epo.org
pensioners.epo.org
GVW1043.dev3.test.epo.org
haithhd01.internal.epo.org
medxfer.internal.epo.org
api-i.register.epo.org
cvc.epo.org
api.register.epo.org
register-i-no-apigee.epo.org
epoextsa.epo.org
fs1.sts.epo.org
bi4you-int.internal.epo.org
translationgateway.epo.org
admintools.internal.epo.org
*.register.epo.org
gvw566.dmz.epo.org
vhepoh02ci.hec.epo.org
translationportal-o.epo.org
haimnhd01.internal.epo.org
tools.epo.org
forms.epo.org
wcm.trilateral.internal.epo.org
epogateway-o.internal.epo.org
activesynct.epo.org
test.epo.org
saptrain.internal.epo.org
register-i.epo.org
ops-i.epo.org
gvw629.dev1.test.epo.org
mnw231.dmz.epo.org
forms.epo.org
translationportal-i.epo.org
vhepop02ci.hec.epo.org

Certificate

The complete raw certificate details for mnw231.dmz.epo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOLa2o5FI9yq72dRATUP
KwQrOXt7GUDEd+31z1294VUmetOjoH3XKLFWyKuKCFTORbdxZqJiOXVOqc5TLgX2
qRnnAuHlVHep7rDy3JV69w1HlY1aZU7Ha4zt0hSc0MoAf/uPfTiFG3a2O8s1e5ww
65tPeijN8kZrfbNEeY+ci6WDkf+FkQ4m9b1+8kgX8OR+4vxeo+TUTmR/3sofnmSL
yB08x63sOldVqq+a9c26qIJIvzTOQqNiZwiPkD5vuJY/uPkFqHYG6oMS46iteX5b
3XjYj3GDnLejMpgZnLpNISIGZ2PNb8dRn1RvSOvYMIROzXD8SICjmg8fAYchZl9I
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22932936658571697008274671673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 12:21:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 12:21:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Patent Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mnw231.dmz.epo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21319901553518617259645229897105513276436067813543892740742346273224860242357754969555921274612977785466660699962131210851015233324985763107872995339257874737701944929445180954679210780467491561726275877087506053905363066894179655759249224786161686024577412839740117238374754285941903654994042837245788141828310515910317115028874756181885399838372351483722242185760910799198973950543910240174775812471279878557468024490308356704301326322343872582335188776978563089379575417456899513307016855018803044915959970001440772365835073098574891761049076155080960992901994230000799675515257133632124242992145598962731700930723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnw231.dmz.epo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77f33fff25a2a3aa30219544869bb2819c4b4360
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002933ce1b6c4331d1bcea9b04edbee2ae19be5e24c64fb36016f5fa6c76de9c8e7c8966ebfeb57861f3016679de0ddf83664107f32614fc927a84ebbcdd268b225a432965caf5d2ade570c84a547955ecf8e315dc6ded88b87445f9164b35a167af4bdaf5afaf71459dc16249524f8e291ab7ef5aebe20f6abd37642285e59f9c8bd1b54993295a66e987c9753b3748be61ccb66324303d0e1a4220ffa7f89b15c0076cb7a0e6fc12657143a28330b39d280d23e2590c0f43fb365d41b42a1249448cef1844fe53296bc78607eaa45829f008929daa09dd05d12a7cd278d12ba99c9439dcb9bfc021d7b10ce84e7fe626c67aaa0e9783cdced6ec4dacd0fd7e22