translationportal-i.epo.org

- European Patent Office -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1d:86:48:30:87:55:dc:bd:6c:07:ef:59 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

European Patent Office

Organization: European Patent Office
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:86:48:30:87:55:dc:bd:6c:07:ef:59
Serial Number (int): 9137402250229792729203208025
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 19:98:52:61:30:b0:88:2a:34:b4:e9:00:c5:7e:6d:90:a7:ec:db:32
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 81:5b:b2:6a:1e:0a:e2:50:8d:ec:58:81:35:cb:b4:eb:a9:10:15:ad
Fingerprint (sha256): 0e:77:9f:67:2e:a6:6f:31:fd:f3:cc:24:25:48:ee:70:06:c4:ca:b6:9a:d1:45:ee:92:16:c6:58:f3:db:79:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate translationportal-i.epo.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for translationportal-i.epo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

translationportal-i.epo.org

Other certificates including the domain name epo.org

(limited to 100 certificates)
register.epo.org
hybrisapp-i.internal.epo.org
umprest-p.internal.epo.org
vhepop02ci.hec.epo.org
pthw-mn.epo.org
advanced-search-services.internal.epo.org
register.epo.org
gvw209.internal.epo.org
epomail.rsrc1.epo.org
vault-d.internal.epo.org
wmail02.epo.org
data.epo.org
ci.internal.epo.org
elk-p.internal.epo.org
ops-o.epo.org
besba01.rsrc1.epo.org
tools.epo.org
gvw049.dev1.test.epo.org
containerhub.internal.epo.org
ops.epo.org
umprest.epo.org
wcm.cooperativepatentclassification-d.internal.epo.org
gvw633.dev1.test.epo.org
nationaloffices.epo.org
GVW295.RSRC1.EPO.ORG
documents.epo.org
epoqueac.gpfs-prod.internal.epo.org
sapprodwd1.internal.epo.org
cmgprod01.epo.org
mvcsc01.internal.epo.org
gvmail03.epo.org
besba01.rsrc1.epo.org
register.epo.org
*.nautilus.internal.epo.org
translationportal-o.epo.org
sapprodcs1.internal.epo.org
mnw084.rsrc1.epo.org
tas-d.internal.epo.org
register-no-apigee.epo.org
gshahmp03.internal.epo.org
MNW352.dev3.test.epo.org
epo-appsentry.epo.org
webserv.epo.org
VDI.INTERNAL.EPO.ORG
GVW1119.INTERNAL.EPO.ORG
gvw438.dev3.test.epo.org
fileaccess.internal.epo.org
nationaloffices-o.epo.org
gshahmp02.internal.epo.org
blog.epo.org
gspstn01.rsrc1.epo.org
jira-o.internal.epo.org
remote.epo.org
ops.epo.org
hpa-mn.internal.epo.org
opd.epo.org
developers.epo.org
gvw697.rsrc1.epo.org
register-o.epo.org
vhepot02ci.hec.epo.org
data.epo.org
hybrisdh-d.internal.epo.org
mnw286.rsrc1.epo.org
register.epo.org
MIMDEV.DEV1.TEST.EPO.ORG
GVW1119.internal.epo.org
tcloudex.test.epo.org
infoclient-i-new.internal.epo.org
pensioners.epo.org
GVW1043.dev3.test.epo.org
haithhd01.internal.epo.org
medxfer.internal.epo.org
api-i.register.epo.org
cvc.epo.org
api.register.epo.org
register-i-no-apigee.epo.org
epoextsa.epo.org
fs1.sts.epo.org
bi4you-int.internal.epo.org
translationgateway.epo.org
admintools.internal.epo.org
*.register.epo.org
gvw566.dmz.epo.org
vhepoh02ci.hec.epo.org
translationportal-o.epo.org
haimnhd01.internal.epo.org
tools.epo.org
forms.epo.org
wcm.trilateral.internal.epo.org
epogateway-o.internal.epo.org
activesynct.epo.org
test.epo.org
saptrain.internal.epo.org
register-i.epo.org
ops-i.epo.org
gvw629.dev1.test.epo.org
mnw231.dmz.epo.org
forms.epo.org
translationportal-i.epo.org
vhepop02ci.hec.epo.org

Certificate

The complete raw certificate details for translationportal-i.epo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX3MadCvHDx0VTst7vPp
wi2OVq8yN2vxA0My9llYGoPlMxHPcRUZTRHS13LvFTdP9EgjsEMZ9JwBNcF+nfJ/
C4LSBa71PkD7MMyCaX5+tLj8M7owff+6v6V9hhO0xwITzP9K3YcY9GTiE6nWC9ex
lASnORfmWbMY+duhpokwAgxpqA9LCegakIa2DZOZBgs6sF2PXPJ2VTySXUrrdExV
e7JoVPW8VQzmmQnS80AGGa2mxQFOKnZxz+KUTClb/b9uhH2Dgn1o0CKy1ZiRWb8J
PveJMrDRYXzZV96ZKpZEfQ0i+0HndqvM5ADIGza8mFx1vXu61cTSa9fQwtJc5cKc
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9137402250229792729203208025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 12:31:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-07 13:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Patent Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'translationportal-i.epo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22406213526241720073287156607020619508792115086231696022893441355905824734467564832365045276477817500070123666273645119729606074823498034059348862636649799049983004669404795669303645658219553210133294792357535392337025514969053411686188756497389646721232653300471769547153856316949431884240061053999821454308328509161936633728166004702641423034774111004965744324647159450665765822499749260486855864671283105763114687483451880671286525428182343431649378184547108256893544616232034401487127113093078669945558814502362889963619566985320114515752921454384158204231065805507426992526566302097453245387313720293871952501999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translationportal-i.epo.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1998526130b0882a34b4e900c57e6d90a7ecdb32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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